3ea268e3fa637166cbeb225b673dbce977eb2382b17bb89a47c42fff51a1c7d8

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 23:44

Target
2026-09-29_154a885f7eac8436e54d031b02af20c9_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 2.4MB
Sample260930-3rbtnatt2r
SHA256 3ea268e3fa637166cbeb225b673dbce977eb2382b17bb89a47c42fff51a1c7d8
MD5 154a885f7eac8436e54d031b02af20c9
SHA1 3c7b7b397cec4e3e8431f71f554f34bcfab0b6e5
SHA512 2cb1e308073baecc1bcf6c0fdb301a151a7bd25f33f9b39360c4d62b1b173d0087d559c0cd16577c20e62bafeffe6a98c709a7dff07761383da1b2645ad2ea36
SSDEEP 24576:iD5TvinrmbLG+VkGDvQGs94iGWWdTxT5f5EnNlT0y82Ze0p4Ek4niOkl/A04szEr:k56r4Vk0QGTvntQfeW4SkZP4sz9MbDii
TLSH
T182C51842A7A98F72F0AEC074C4829669F5333C490BE24AC7015EBF296F376D499F9315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3024	2026-09-29_154a885f7eac8436e54d031b02af20c9_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3024	2026-09-29_154a885f7eac8436e54d031b02af20c9_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_154a885f7eac8436e54d031b02af20c9_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_154a885f7eac8436e54d031b02af20c9_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3024