7f5f21aa842222054bc8a1ef1a0b7ed98333fdb72464bc4ad057bc99114b203a

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 00:07

Target
2026-09-29_5da97c64023e2f6f871ede9afde75b23_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 3.7MB
Sample260930-aegvxsaa79
SHA256 7f5f21aa842222054bc8a1ef1a0b7ed98333fdb72464bc4ad057bc99114b203a
MD5 5da97c64023e2f6f871ede9afde75b23
SHA1 601ad07188c9f758dc82538ea92774d1bff7b7a2
SHA512 f48d85ff3863c827b8f91640dbc7683874b9ea12ec5d8dea6b9b5047a6211f8a4f4efc1d127ffca8cb18b2107ecdeeb397f0b128880788fa20d4b22d44f82739
SSDEEP 49152:k56r+qJtb2IU56rf56r+qJtb2IpeW4SkZP4sz9MbkqJtb2IRpYq:hr+Grgr+WfkZck06
TLSH
T1A406B615F5688B21D07BD0B9C6D2A69AFA333C415F708BCB0285EA7C3E276D58536723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3504	2026-09-29_5da97c64023e2f6f871ede9afde75b23_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3504	2026-09-29_5da97c64023e2f6f871ede9afde75b23_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_5da97c64023e2f6f871ede9afde75b23_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_5da97c64023e2f6f871ede9afde75b23_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3504