571e86a4febbb2681f07d08e1fc2f54b4bb4b16b15c647c70c768a5c5f0dfd3b

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/10/2026, 08:50

Target
2026-09-30_a345313a0af7b11cf61e840d22587417_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Size 910KB
Sample261001-krydjsys4k
SHA256 571e86a4febbb2681f07d08e1fc2f54b4bb4b16b15c647c70c768a5c5f0dfd3b
MD5 a345313a0af7b11cf61e840d22587417
SHA1 4804fcb1cfdae45d85ff23d505cb36444025cf8d
SHA512 4d3242a9b4065759219b129a33c028c399798c7da07db5a8340326f213bb97ad105bd5e0fa02f549322bb959d51a935c37ca881ebb89e3d2c8b95de3fafddc88
SSDEEP 24576:JQfJC5YLfR2RNxhAYTqMi8CtBd2QHCHmTBW5:nqJtb2I
TLSH
T173152925F6B48761E073C0B5C5D2AA9AEE7234825B30C6CB134AC3282F677D6D53A771
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2026-09-30_a345313a0af7b11cf61e840d22587417_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-30_a345313a0af7b11cf61e840d22587417_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe"
1⤵
PID:2252

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5088