a3cbc5532b3b2799cc919744f7a947012cfe27c5d378d397e0eeca933128404b

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 07:03

Target
2026-09-23_6a97c3c5d44aa4f78fdb73eda430238a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.4MB
Sample260924-hvrn3azgnf
SHA256 a3cbc5532b3b2799cc919744f7a947012cfe27c5d378d397e0eeca933128404b
MD5 6a97c3c5d44aa4f78fdb73eda430238a
SHA1 faf9bc3937b7bac5c76091658f361f167cebfd40
SHA512 6515af733a9a0ecbbb64c0958c71b6dd75cb13d079ff582bdc43e25df9287f690653c60bbf6a2e2f344fae42d0ddc7c4c76673eee205d6fc919f4d12c3a4af5e
SSDEEP 24576:iD5Tvinrm5OaEBYLkiNgh5jcAkSYqyED0Le5ji0hmxNrM:k56rnpYqjPji0Aj
TLSH
T197651915F6648B61D07BC0B9C5D2969AEA733C425F308BCB0285DB683F277D68936732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1460	2026-09-23_6a97c3c5d44aa4f78fdb73eda430238a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1460	2026-09-23_6a97c3c5d44aa4f78fdb73eda430238a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-23_6a97c3c5d44aa4f78fdb73eda430238a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-23_6a97c3c5d44aa4f78fdb73eda430238a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1460