14e1fdc9d6a84b189bd607e876ef0463b0e313f82c9c9b5be48fcf76f183e3ca

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 19:18

Target
2026-09-29_77e8c9cc3f581a95302e5242359b486a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 454KB
Sample260930-x1dfysxthx
SHA256 14e1fdc9d6a84b189bd607e876ef0463b0e313f82c9c9b5be48fcf76f183e3ca
MD5 77e8c9cc3f581a95302e5242359b486a
SHA1 917c21553cb4cbdefb4ebba270d49520f88b975a
SHA512 2f530b389e9764f628ad64a651b7affa6d38262d9e5a01b787f969047343071c1ba012b91ba255fab8fe5451d9a752acd167326606a0a6558d3d98fb035694ef
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNFsIHiKa7/VC964OTGiKa7PhTnqnNxF:iD3JeU7vinrmdCKaEBiXKapTSzF
TLSH
T1F7A48D06A6984FA5E61F8130E5D10596EA737D029F5087CF1364BE293F327C0BE792A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1808	2026-09-29_77e8c9cc3f581a95302e5242359b486a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1808	2026-09-29_77e8c9cc3f581a95302e5242359b486a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_77e8c9cc3f581a95302e5242359b486a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_77e8c9cc3f581a95302e5242359b486a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1808