d52f41abc9cd5d3e15c9f27564dbe2a8444b9de1ef73c05fb20a5bc43c31fec8

Analysis

max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 22:29

Target
2026-09-29_31ca2bbfee14ceae4a2ddf0594b89819_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.7MB
Sample260930-2ejs3a1wfx
SHA256 d52f41abc9cd5d3e15c9f27564dbe2a8444b9de1ef73c05fb20a5bc43c31fec8
MD5 31ca2bbfee14ceae4a2ddf0594b89819
SHA1 cb4f1e51f5dde7f4691898d7f5226600e42e3db3
SHA512 c5f0ce68498f8f196458894e0dc4fe958a1ba3dcecd0b4f6e09567d11f70617b55134967aa33f080b42b2fa333d9eafe7ecb4e9376594800a97268880a9be3cd
SSDEEP 24576:iD5TvinrmdCKaEBiXAQfZe0p4Ek4niOkl/A04szE87JKTvmL45jcAkSYqyE:k56rXeW4SkZP4sz9MbfpYq
TLSH
T1A1850915F5788B22D0B7C0B9C5D2AA9AFA3338465F308BCB0245DB6C3E276D68535736
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2000	2026-09-29_31ca2bbfee14ceae4a2ddf0594b89819_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
2000	2026-09-29_31ca2bbfee14ceae4a2ddf0594b89819_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_31ca2bbfee14ceae4a2ddf0594b89819_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_31ca2bbfee14ceae4a2ddf0594b89819_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2000