4258f833c46f7ff5bd26c765c35f166e95301bf574f17aa1ca3a7a20b930898d

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 12:27

Target
2026-09-23_2400f7577aa5088fecf0054c85f94e0b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1003KB
Sample260924-pm75eaea27
SHA256 4258f833c46f7ff5bd26c765c35f166e95301bf574f17aa1ca3a7a20b930898d
MD5 2400f7577aa5088fecf0054c85f94e0b
SHA1 4a07705ee14aa7bf8dc6d7aefbe9cf71befb9e21
SHA512 d75ce2ada7c419368970f76d146d54afa0166ef88a8c90039c1e6a8d95dd03cda9d73dd16966b7f3ad5554bb61b0a700aede7a001fd7b6a6a999792b9cb34696
SSDEEP 24576:iD5TvinrmdoTpYagsEDacYavP0Le5ji0hmxNrM:k56rSPji0Aj
TLSH
T1B2252816F6644F61D06FC0B5C5D2569AEA733C425F308BCB0355AE283F276D29A3A363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5548	2026-09-23_2400f7577aa5088fecf0054c85f94e0b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
5548	2026-09-23_2400f7577aa5088fecf0054c85f94e0b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-23_2400f7577aa5088fecf0054c85f94e0b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-23_2400f7577aa5088fecf0054c85f94e0b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5548