d7bddd10e5f75509e9a2a10f7a6739b47eb0f9f5097deed8128a9bd372a5c304

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 21:28

Target
2026-10-08_0af6bfbb25184b84521715c9b158dad4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 889KB
Sample261009-1bbslsct9k
SHA256 d7bddd10e5f75509e9a2a10f7a6739b47eb0f9f5097deed8128a9bd372a5c304
MD5 0af6bfbb25184b84521715c9b158dad4
SHA1 c2eb75771c0b4706615bdf334c13bde1f6a1e3a1
SHA512 7624c3080098a3f821c14ca41a7a88b9cb13f95fdb3dbfb7d150fbd97259ebfe776aba13d710a1c0c7e51249e66dd60bf91be853c8332a7efe8b1ed3aedd4d92
SSDEEP 24576:iD5TvinrmdjQyrE+oOaB3a45jcAkSYqyE:k56rppYq
TLSH
T149152816E6648F61D07FC079C5D2569AEA733C464F308BCB1385AE683F236D1993A363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5144	2026-10-08_0af6bfbb25184b84521715c9b158dad4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
5144	2026-10-08_0af6bfbb25184b84521715c9b158dad4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-08_0af6bfbb25184b84521715c9b158dad4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-08_0af6bfbb25184b84521715c9b158dad4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5144