5bdfae8c3b31d0658ba05ebe994d7c00cc433f515638039f34677551f921a4a5

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 23:49

Target
2026-09-24_c07ce6094a1105943b1e9dbc778c9c8c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 3.0MB
Sample260924-3vckcszset
SHA256 5bdfae8c3b31d0658ba05ebe994d7c00cc433f515638039f34677551f921a4a5
MD5 c07ce6094a1105943b1e9dbc778c9c8c
SHA1 eb9670bd4a4dc529a9225200d92f2fa25b5bf0ea
SHA512 b61b76db0ef4b5f5fb1a4fbdfe005a0c4f35bc377c8fe68ad2dd61c7dfc9a7bdb7e430672b3b74bc896dbf9f00e4380427bc4931c015ff0cf6f368387a1bc74e
SSDEEP 49152:k56r+qJtb2IU56rf56rbeW4SkZP4sz9MbmeW4SkZP4sz9Mb:hr+Grgr7fkZc+fkZc
TLSH
T144E5A315F5788B22D0BBC0B9C6926A99FA333C455F608BCB0285EB3C3E276D58535727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3544	2026-09-24_c07ce6094a1105943b1e9dbc778c9c8c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3544	2026-09-24_c07ce6094a1105943b1e9dbc778c9c8c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-24_c07ce6094a1105943b1e9dbc778c9c8c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-24_c07ce6094a1105943b1e9dbc778c9c8c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3544