23460fd8681361a09f1546adb7d25f0a7b31710f8beb637c8ec452256a0c82cc

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 12:34

Target
2026-09-23_227fbc50b278132b6c3a947c997d3539_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 2.5MB
Sample260924-pr319atfkd
SHA256 23460fd8681361a09f1546adb7d25f0a7b31710f8beb637c8ec452256a0c82cc
MD5 227fbc50b278132b6c3a947c997d3539
SHA1 df565c608356510272f0123149c221a1532cc6ce
SHA512 466d2c42a71689dc6bc2da33dd7ed1c429bf860b17fb319b1f252e120ba762fa047a2d9131fc7d1c2a85cbbab77a2ac59f3a3bf17187685594a6392f2a377c6b
SSDEEP 49152:k56rIqJtb2I0qJtb2IdqJtb2IQPji0Aj:hrIXcZjo
TLSH
T11AC5F925F6748731D077C0B9C5D2A69AEE3238425F308ACB1286DB6C3E676D6C536732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6020	2026-09-23_227fbc50b278132b6c3a947c997d3539_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
6020	2026-09-23_227fbc50b278132b6c3a947c997d3539_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-23_227fbc50b278132b6c3a947c997d3539_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-23_227fbc50b278132b6c3a947c997d3539_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:6020