3312c9faaf56f135d1225bef00938c99eb8a26ea4a77cc384f84af90cfa5e374

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 09:56

Target
2026-09-24_521d3428ad31046dbadfb1f491aef17e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.6MB
Sample260925-lyck4adb76
SHA256 3312c9faaf56f135d1225bef00938c99eb8a26ea4a77cc384f84af90cfa5e374
MD5 521d3428ad31046dbadfb1f491aef17e
SHA1 e8368176e44b97ccf40789fe8c111638cde9edea
SHA512 2b5ed88179409b7c19538c858d29fd22c3d65c400be2392ec7d11dcf6aaa93ff2d9d3c3e20327f121c9f3a45909edab02b416d9df6f673f4f446f2c216ccc63a
SSDEEP 24576:iD5TvinrmdoTpYagjiMYTqMi8CtBd2QHCHmTBW5MLdYTqMi8CtBd2QHCHmTBW5:k56rJqJtb2I6qJtb2I
TLSH
T17E75F825F5A48B21D07BC075C9D2969AEA333C825F308BCB1246BB683E376D5D536732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3516	2026-09-24_521d3428ad31046dbadfb1f491aef17e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3516	2026-09-24_521d3428ad31046dbadfb1f491aef17e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-24_521d3428ad31046dbadfb1f491aef17e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-24_521d3428ad31046dbadfb1f491aef17e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3516