38ab6c204d1c1952ebbf95e6a3647d0f707656c0961ca9104c29a03d135a43c7

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 01:01

Target
2026-09-23_d7eeadf4de9d1942348c6cdf19449cbe_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 3.1MB
Sample260924-bdf3nsad77
SHA256 38ab6c204d1c1952ebbf95e6a3647d0f707656c0961ca9104c29a03d135a43c7
MD5 d7eeadf4de9d1942348c6cdf19449cbe
SHA1 ebb8ffb31f27b3167cf949739b986b8f4063c249
SHA512 6d77190bb106da53d26180412cca50d8e9be7d6c670c25c003631acb6a7a4fe1b40cbb326d40784a2c09b25e331b033b72690e59a414f751f9827b85acd8135e
SSDEEP 49152:k56r+qJtb2IU56rf56rbeW4SkZP4sz9Mb5eW4SkZP4sz9MbE56rX:hr+Grgr7fkZcNfkZcBrX
TLSH
T14AE5A315F1788B22D07FD0B9C6926A99FA333C455F608BCB0285EE2C3E276D58935727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2028	2026-09-23_d7eeadf4de9d1942348c6cdf19449cbe_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
2028	2026-09-23_d7eeadf4de9d1942348c6cdf19449cbe_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-23_d7eeadf4de9d1942348c6cdf19449cbe_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-23_d7eeadf4de9d1942348c6cdf19449cbe_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2028