56856fb97e5894cae8c58ffae43799dc03675d4a939324de781ce3a13a220dee

Analysis

max time kernel
150s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/10/2026, 09:49

Target
2026-09-30_967fb5b23aada2091d2630c315d516b2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 475KB
Sample261001-ltcqashb72
SHA256 56856fb97e5894cae8c58ffae43799dc03675d4a939324de781ce3a13a220dee
MD5 967fb5b23aada2091d2630c315d516b2
SHA1 22313e2cc6526d2764b5c59f4919f53c457720f2
SHA512 898efe9bfe1cc14bd846b1c7208f93f902e1910bad76e45d044e92dbed73debb5d9b69f65438dba7de3d35e4692b819250c89756bf0aeaecc6a73a370027dbfc
SSDEEP 6144:TWTSIoXNHnr1GJOl4uvjgddFjEdi/4Uei4lVC9UiYgi347uSiox6oaEAnsD9:TWcRGJlFoUQfJC5YtIlVvAQ9
TLSH
T1A9A49E13EAA808E5F6168670E4E50646EB757D57ABA1C3CF232881151F623C0BF793F9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2026-09-30_967fb5b23aada2091d2630c315d516b2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-30_967fb5b23aada2091d2630c315d516b2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
PID:2756

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4868