8ce977bf9a41c9b2f85c1600e603fb2b76ad916d9f75dfa3ebd0697359f29ca9

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 04:25

Target
2026-09-29_226e1bb6421df1dd40acc33bdffe52b5_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 2.2MB
Sample260930-e17exsxanf
SHA256 8ce977bf9a41c9b2f85c1600e603fb2b76ad916d9f75dfa3ebd0697359f29ca9
MD5 226e1bb6421df1dd40acc33bdffe52b5
SHA1 52030ec6607dc577644d3078e3d396c83c3c1058
SHA512 dc29ed1db883077ed58fda2580c5694f9d3e8529c07a0fd51c45f6127b81d96f46add4739d16d00b80e07a3daff1d128c767ebeecf081eed5e8ed1e3e8889a2e
SSDEEP 49152:k56r+qJtb2IpeW4SkZP4sz9MbfqJtb2I:hr+WfkZcf
TLSH
T1DDA5E915F5788722D0B7D0B9C5D2AA9AFE3238455F308ACB0246DB6C3E276D6C536732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3060	2026-09-29_226e1bb6421df1dd40acc33bdffe52b5_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3060	2026-09-29_226e1bb6421df1dd40acc33bdffe52b5_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_226e1bb6421df1dd40acc33bdffe52b5_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_226e1bb6421df1dd40acc33bdffe52b5_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3060