7ef83b606acd085f1ad557033db878cf2b0a19cb2c4a3c6362544e0255417194

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 10:19

Target
2026-09-23_3e72fedcffce63bf72b0b6523bd964aa_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 3.5MB
Sample260924-mchewsbb75
SHA256 7ef83b606acd085f1ad557033db878cf2b0a19cb2c4a3c6362544e0255417194
MD5 3e72fedcffce63bf72b0b6523bd964aa
SHA1 4ee2350f1a63d7693e86d8d0ad457cd884f99085
SHA512 9728a2b42e0121a4f8ce4a5bea71b2ed613cd13308f1736d811f234b1539e42dbac193ef89c71b9cc8241573a4cad21260cdbd2cf36073ab84ef7873ea79d937
SSDEEP 49152:k56r+qJtb2IU56rf56rbeW4SkZP4sz9Mb5eW4SkZP4sz9MbkqJtb2I:hr+Grgr7fkZcNfkZck
TLSH
T17706B515F5788B22D07BD0B9C6D26A99FA3338455F308BCB0285EB2C3E276D58536727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3392	2026-09-23_3e72fedcffce63bf72b0b6523bd964aa_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3392	2026-09-23_3e72fedcffce63bf72b0b6523bd964aa_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-23_3e72fedcffce63bf72b0b6523bd964aa_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-23_3e72fedcffce63bf72b0b6523bd964aa_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3392