e2d090d0b561bdb72b365328348c1702110379a7e29e26c35b4e5e7b284180b3

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 19:41

Target
2026-09-29_6d585dbd9d75880db24593b1012f64e3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.9MB
Sample260930-yeacvashnc
SHA256 e2d090d0b561bdb72b365328348c1702110379a7e29e26c35b4e5e7b284180b3
MD5 6d585dbd9d75880db24593b1012f64e3
SHA1 7062f4f91b46f783a992b581bec814983d107c6f
SHA512 a20b8177a44f14e9396c6858859b08d3fc3f817204078017898ac8541e55555f9bdf77218645019524b7740dffe2ab232ec7acc60729301f16de134293620a4f
SSDEEP 24576:iD5TvinrmdocjPXik/zw5jcAkSYqyE3YTqMi8CtBd2QHCHmTBW5M45jcAkSYqyE:k56rjpYqOqJtb2IMpYq
TLSH
T1DB951A15F6648B31D077C0B9C5D2A69AEE3238425F308BCB1246DB683F277D69936732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2800	2026-09-29_6d585dbd9d75880db24593b1012f64e3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
2800	2026-09-29_6d585dbd9d75880db24593b1012f64e3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_6d585dbd9d75880db24593b1012f64e3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_6d585dbd9d75880db24593b1012f64e3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2800