0f36bca097f994414c5eaad373e91514130620ef0c783f074282a0c248eac2ce

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 23:13

Target
2026-09-29_213bf4129a4cc31d394045de85957eef_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 555KB
Sample260930-27rdlswanf
SHA256 0f36bca097f994414c5eaad373e91514130620ef0c783f074282a0c248eac2ce
MD5 213bf4129a4cc31d394045de85957eef
SHA1 d0081fd42174abe7c340015d237a0430e3cf7cba
SHA512 70c20e0a76467d2621fadef094cfe12cf75aeb56d6f34b5e03eb4aa82625a56d52208033c94e700c27a3062de7cac55f509c2942d90bf514b347183ef7db858e
SSDEEP 12288:G92+CzNDS5lSZ7NrapUrE9+aYFLq3nG7HJya:GFCzNDS5lSZpapUrEZ3G7HJya
TLSH
T1F3C45B5677F429E1F1B79A7499B59565EB72BCB21F30C30F1250B22E0E33B809E24726
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2026-09-29_213bf4129a4cc31d394045de85957eef_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_213bf4129a4cc31d394045de85957eef_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
PID:2984

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3212