f2cde4baa53d1ac42946d275ebedc5464f72f1df4608c33e4ba5a544a81db0f5

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 17:18

Target
2026-09-29_b3558ad7b2cc20cc2090a5fbe71bf967_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 654KB
Sample260930-vvp7fstgrc
SHA256 f2cde4baa53d1ac42946d275ebedc5464f72f1df4608c33e4ba5a544a81db0f5
MD5 b3558ad7b2cc20cc2090a5fbe71bf967
SHA1 a500891c71bb026b7a9d88f4709774b4d7dbbd3b
SHA512 966a5b7d691c5407799168a1813dd2a9d66e2aa9cbd2155b9732f5ef8e5f72a2fde4eeb48ff2e01c0d125c5e1de0c9450fc398e52b48e92717502118a540fd9a
SSDEEP 12288:iD3JeU7vinrmAAhXTVsCUDYJRBIQVTf33+Y+D3JeU7vinrmb:iD5TvinrmAyyCUq7lfHL+D5Tvinrmb
TLSH
T13CE4F50662988FE5D16F9178C99286B6E7737C114F2147CF06A0FE3A3E37690AD39613
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4728	2026-09-29_b3558ad7b2cc20cc2090a5fbe71bf967_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4728	2026-09-29_b3558ad7b2cc20cc2090a5fbe71bf967_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_b3558ad7b2cc20cc2090a5fbe71bf967_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_b3558ad7b2cc20cc2090a5fbe71bf967_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4728