8649e62feb60ccc5ba9dd5ade23c133db414d6891cc7c20d6ae86e3ffed2d3d1

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 22:24

Target
2026-09-29_33279b4333043907734a8ebbf313c84c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 851KB
Sample260930-2bnmva1tev
SHA256 8649e62feb60ccc5ba9dd5ade23c133db414d6891cc7c20d6ae86e3ffed2d3d1
MD5 33279b4333043907734a8ebbf313c84c
SHA1 4e2528c04644163687f5c4f84baa2500427cf3b4
SHA512 8df74d1ec1cea91a21b3aef508f4566df832933fd1a1bd86859eee94e503888d308d269e6fed99ac6d9999478d0c3cbb6af273baf69dad7e1b9cb0894e06fb41
SSDEEP 12288:iD3JeU7vinrmdCKaEBiX5nw1gL5pRTcAkS/3hzN8qE43fm78V:iD5TvinrmdCKaEBiX5nF5jcAkSYqyE
TLSH
T1DB052815F6648F61D07BC0B9C5D2969AEA733C464F308BCB1385AE683F236D19939363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
996	2026-09-29_33279b4333043907734a8ebbf313c84c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
996	2026-09-29_33279b4333043907734a8ebbf313c84c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_33279b4333043907734a8ebbf313c84c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_33279b4333043907734a8ebbf313c84c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:996