db917b14c9425f554cc094a110502409c18ef87e409669d6d42dc7d54b57aacb

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 10:15

Target
2026-09-24_4e5f74c2ae8d0e2c3f36a741d3ccf9d4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 472KB
Sample260925-mal1asdc85
SHA256 db917b14c9425f554cc094a110502409c18ef87e409669d6d42dc7d54b57aacb
MD5 4e5f74c2ae8d0e2c3f36a741d3ccf9d4
SHA1 847ae65118ec5c6beb3afd757e53e7dcfc5d4f3e
SHA512 516065eb2897f0ba44f96b98ae81b424916921aa121403e9fec2a1aa0416ec2d09f8110643c4c80015d6954644fbe2777271c0d34629669c8f96f88c104d4379
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNFEVC9vDJVC9Apy6+Ado/C8uSyCq7IwBqDe:iD3JeU7vinrmbLuAQ0dWCXSyCq7IwZ
TLSH
T111A45B1626984FA5D1BF8178D992466AE3737C114F2087CF0294BE663F336C0AE79397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4204	2026-09-24_4e5f74c2ae8d0e2c3f36a741d3ccf9d4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4204	2026-09-24_4e5f74c2ae8d0e2c3f36a741d3ccf9d4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-24_4e5f74c2ae8d0e2c3f36a741d3ccf9d4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-24_4e5f74c2ae8d0e2c3f36a741d3ccf9d4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4204