55b687e50d196fc1ee79750f189c7cab2ae734e90cf0d76a33f62c9ec6f3df1c

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 10:16

Target
2026-09-23_3f02dc0b505c40ef7aabb7f445393a64_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 468KB
Sample260924-mas4lsbb44
SHA256 55b687e50d196fc1ee79750f189c7cab2ae734e90cf0d76a33f62c9ec6f3df1c
MD5 3f02dc0b505c40ef7aabb7f445393a64
SHA1 36cc4ca4cc3761c975afe26ae70a1fbd17484e6b
SHA512 34755da46a08ae4e517c1659382e5084c8f20d397dd474310147872649ec068dbdf3dabffc697f834852294ee022937525af3ffe75ac74ae5bab1e366c51293b
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNFsI5ay8dnYa7fIwxoxDa7YTYa7faNa7:iD3JeU7vinrmdoTpYagsEDacYaiNa
TLSH
T14BA47E06A6984FA5E61F8170E4D20596EA737D029F5087CF1364BE293F317C0BE792A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1112	2026-09-23_3f02dc0b505c40ef7aabb7f445393a64_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1112	2026-09-23_3f02dc0b505c40ef7aabb7f445393a64_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-23_3f02dc0b505c40ef7aabb7f445393a64_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-23_3f02dc0b505c40ef7aabb7f445393a64_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1112