f7a200f972afc740caf627eed6773d34039a10dcbdfc7e710d968cb6b08249af

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 17:19

Target
2026-09-29_b344723cd61d877af3a22cbd9af65bb8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.3MB
Sample260930-vvx73athkf
SHA256 f7a200f972afc740caf627eed6773d34039a10dcbdfc7e710d968cb6b08249af
MD5 b344723cd61d877af3a22cbd9af65bb8
SHA1 8a7ee9ad3ce31bf4c53fabc675d094f693e00977
SHA512 a7f95ca1a35905549f6e08987cf35e5c1577a71227d6a4af4b2d73be9b85c116e2b507b7eb6931790d76bd1bc84b389d2c44372e101c0aef159cd18b47f03447
SSDEEP 24576:iD5TvinrmbMD5TvinrmgHZe0p4Ek4niOkl/A04szE87JKTvm:k56rX56rheW4SkZP4sz9Mb
TLSH
T16255C415B1B88F22D0BBD0B9C996AA99FA333C454F204BCB0245BF283E376D59535727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2380	2026-09-29_b344723cd61d877af3a22cbd9af65bb8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
2380	2026-09-29_b344723cd61d877af3a22cbd9af65bb8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_b344723cd61d877af3a22cbd9af65bb8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_b344723cd61d877af3a22cbd9af65bb8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2380