57c39da95f9daed89103a6c93ac99d90c97567ca84e0ccda5f0a01869e36e19b

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 12:12

Target
2026-09-23_2736a49e03ec5be67c1df28ecabffa33_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 969KB
Sample260924-pdc8nsde95
SHA256 57c39da95f9daed89103a6c93ac99d90c97567ca84e0ccda5f0a01869e36e19b
MD5 2736a49e03ec5be67c1df28ecabffa33
SHA1 fd442c6ba1289cb857e49817bdaa72f91c4b4eb6
SHA512 f4b89a29598061c0f0b1b1f117480ea826a1b271857f33748a9c19fd26c12324380a98bc8b5ca821a62aba4a940a994a332d9fbe41374b5839b8214de5d9eb20
SSDEEP 24576:iD5TvinrmdoTpYagsLcNYTqMi8CtBd2QHCHmTBW5:k56r7qJtb2I
TLSH
T186251825F5A88F65D07FC075C5D2969AEA333C425F308BCB1245AE283E376D1993A723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6008	2026-09-23_2736a49e03ec5be67c1df28ecabffa33_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
6008	2026-09-23_2736a49e03ec5be67c1df28ecabffa33_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-23_2736a49e03ec5be67c1df28ecabffa33_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-23_2736a49e03ec5be67c1df28ecabffa33_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:6008