6411d99248a39bfcaaf3ab902123c731e7455fa5f6d3849a9f32f41fda7a59b2

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 15:49

Target
2026-10-01_431ac9f13ebdf4faab4970397b150bd0_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Size 1.3MB
Sample261002-s9d2mavfkd
SHA256 6411d99248a39bfcaaf3ab902123c731e7455fa5f6d3849a9f32f41fda7a59b2
MD5 431ac9f13ebdf4faab4970397b150bd0
SHA1 614e7937a0b25c520c1310a3870fad4fe997c74a
SHA512 b4583531ec8b11d871787157bae773417791e8b3363e6915d31c956783d708c5351d55c9258c3d6a52feca20728dd779774df9d2e965d901b96300b5bffe605d
SSDEEP 24576:r0l98bsciAbRagCD5jcAkSYqyED0Le5ji0hmxNrM:YpYqjPji0Aj
TLSH
T193552A16F6748731D073C0B9C5D2A68AEE7130865B308ACB138AC7782F677D6963A771
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2026-10-01_431ac9f13ebdf4faab4970397b150bd0_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-01_431ac9f13ebdf4faab4970397b150bd0_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe"
1⤵
PID:5096

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1852