e301e5cf952486c6da123dcfe87705abd54b48c624d40bc4e5ae924a8acd72f1

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 14:55

Target
2026-09-29_f675bceeaec24023c44bf87c8455581e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 995KB
Sample260930-salx7aaf56
SHA256 e301e5cf952486c6da123dcfe87705abd54b48c624d40bc4e5ae924a8acd72f1
MD5 f675bceeaec24023c44bf87c8455581e
SHA1 7e57305fe43c9344bd98eac4f4f6b679b0c28a0f
SHA512 bdc86c525f4cd0492a91856dfb77289a8330c82423820b413803e398335b41aa3fc719e2c18b1b66b4710d9916c20c12e4a322c476c0838f4f9866fe2d34a496
SSDEEP 24576:iD5TvinrmdCKaEBiXKahU/sZ0Le5ji0hmxNrM:k56r9Pji0Aj
TLSH
T1E2252816F6684F61D07FC075C5D2569AEA733C425F308BCB0355AE683E276D29A3A323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5376	2026-09-29_f675bceeaec24023c44bf87c8455581e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
5376	2026-09-29_f675bceeaec24023c44bf87c8455581e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_f675bceeaec24023c44bf87c8455581e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_f675bceeaec24023c44bf87c8455581e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5376