eabba9a48f5844212e7acc234445c67c2f407bf290a0eb225cdad75022d939dc

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 23:44

Target
2026-09-29_15058ba3164f543b1216f743df547c84_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 751KB
Sample260930-3rmk6att4p
SHA256 eabba9a48f5844212e7acc234445c67c2f407bf290a0eb225cdad75022d939dc
MD5 15058ba3164f543b1216f743df547c84
SHA1 fa53972fb1a1af511299f6decd3ef5357289e92b
SHA512 f7280181224efcc5f318cb2456468815b95b02637256a9065bd676288bbe9816a29a322e75c9212a613e395c85e2a91251cea406b70297bb8a49f43465dc4957
SSDEEP 12288:iD3JeU7vinrm5OaEBeD3JeU7vinrmgCD3JeU7vinrmC:iD5Tvinrm5OaEBeD5TvinrmgCD5Tvinb
TLSH
T174F4280672984FA4D6AF9174CD9246A6E6737D518F114BEF03A07F3A3E326C0AD39613
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1108	2026-09-29_15058ba3164f543b1216f743df547c84_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1108	2026-09-29_15058ba3164f543b1216f743df547c84_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_15058ba3164f543b1216f743df547c84_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_15058ba3164f543b1216f743df547c84_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1108