2f096162bdc84f4db44075007e042808d93ddb8f7f8cd48a06ba94f6854e5009

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 21:47

Target
2026-09-29_400bada71074b367448467b003708c4c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.2MB
Sample260930-1m56labb23
SHA256 2f096162bdc84f4db44075007e042808d93ddb8f7f8cd48a06ba94f6854e5009
MD5 400bada71074b367448467b003708c4c
SHA1 3f9fb9d9b96a5475b06757bd4d93e4a297c9c9f9
SHA512 9e624476f8a0a802b8fe23fd46201ba0e68be141ab4a4e7e9fb0c1509d9e8ba8b149561d6c5a038607aa87c1952718e6c1a58c09be7f18981a0facaab5deb409
SSDEEP 24576:nxDp5b/2Ya45jcAkSYqyED0Le5ji0hmxNrM:bpYqjPji0Aj
TLSH
T130552916F6748771D073C0B9C5D2A68AEE7130865B308ACB1386C7782F677E6863A771
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2026-09-29_400bada71074b367448467b003708c4c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_400bada71074b367448467b003708c4c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
PID:3616

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:6016