6ef93e8fafbbb4fd632b71cc819c235b73d5613380806e7dfc0cedfc00874397

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 22:43

Target
2026-09-29_2bd53888fd3911082a626f7b5e53be35_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.4MB
Sample260930-2nkfysca27
SHA256 6ef93e8fafbbb4fd632b71cc819c235b73d5613380806e7dfc0cedfc00874397
MD5 2bd53888fd3911082a626f7b5e53be35
SHA1 885883e3f0d1184d851d336f560b65d0aa847491
SHA512 9922730b3a385fe32496ad1a191cb118743bcf65d21be8123b1a30cce2505f37f8b61eb6fa97a180e7701c730a0a36924234d297211c2636ca298cddc91c8170
SSDEEP 24576:iD5Tvinrm5OaEBYCFB7eYCD5TvinrmbEEMD5TvinrmAYTqMi8CtBd2QHCHmTBW5:k56rs56rB56r+qJtb2I
TLSH
T130652915B6A88F65D07FC174C5D2569AEA733C425F208BCB0385BE293E376D1993A323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3300	2026-09-29_2bd53888fd3911082a626f7b5e53be35_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3300	2026-09-29_2bd53888fd3911082a626f7b5e53be35_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_2bd53888fd3911082a626f7b5e53be35_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_2bd53888fd3911082a626f7b5e53be35_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3300