c1a60169c0955aab0d79fc6a783be6c051e27cbc8a23084b3039e67754f7aa45

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 22:49

Target
2026-09-29_29a95e239f872a34b70bc043181dd024_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 2.0MB
Sample260930-2r4c8ssxfs
SHA256 c1a60169c0955aab0d79fc6a783be6c051e27cbc8a23084b3039e67754f7aa45
MD5 29a95e239f872a34b70bc043181dd024
SHA1 f35f6e1aca135a9f30704dbeda875608385e1297
SHA512 50717c1e8b3ef1da94f04cb0d13b273a7b16368df7891f2ee36f6537b6722397cbc946aa9618a62f7d76cca7783f51c30a502fe2045658915f2483efb6c41fe1
SSDEEP 24576:iD5TvinrmdCKaEBiXKapwe5jcAkSYqyE3YTqMi8CtBd2QHCHmTBW5bYTqMi8CtBo:k56rPpYqOqJtb2IdqJtb2I
TLSH
T1E9A50925F6648B21D077C0B9C5D2A69AEE3238425F308BCB1246DB6C3E277D6D536732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4688	2026-09-29_29a95e239f872a34b70bc043181dd024_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4688	2026-09-29_29a95e239f872a34b70bc043181dd024_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_29a95e239f872a34b70bc043181dd024_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_29a95e239f872a34b70bc043181dd024_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4688