2ceb056d14616a5c1169ec4b27e02ae78f6f527f8ce0ef793b07d7e27978fcef

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 06:38

Target
2026-09-23_70e923c61953de83ceb097f9730961da_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1003KB
Sample260924-hd7c7azzhs
SHA256 2ceb056d14616a5c1169ec4b27e02ae78f6f527f8ce0ef793b07d7e27978fcef
MD5 70e923c61953de83ceb097f9730961da
SHA1 4340836cd8d7f1157b0ce7c1e8dcc013fc968dee
SHA512 dec17ba54802566bded30d59b1088b954949ee18a068bd0e5d2de6692f743806eea73899317bdb251ee346be099f6bb602a9ac3045aa6b4bb95308442866f832
SSDEEP 24576:iD5Tvinrm5OaEBYLkiNkaaLV0Le5ji0hmxNrM:k56r3Pji0Aj
TLSH
T18E252816F6684F61D06FC075C5D2569AEA733C425F308BCB0355AE283F276D29A3A363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5164	2026-09-23_70e923c61953de83ceb097f9730961da_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
5164	2026-09-23_70e923c61953de83ceb097f9730961da_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-23_70e923c61953de83ceb097f9730961da_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-23_70e923c61953de83ceb097f9730961da_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5164