9e773e6078a739d8ad89e68259c1a3808da19cc3348f1bf14157a33afc37c219

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/10/2026, 16:58

Target
2026-10-11_87d12c388880119c60e2c64087df1eeb_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 469KB
Sample261012-vg2nbsysd1
SHA256 9e773e6078a739d8ad89e68259c1a3808da19cc3348f1bf14157a33afc37c219
MD5 87d12c388880119c60e2c64087df1eeb
SHA1 b8d7f7054967a86cf80e5f073af4f2c7d8407062
SHA512 62a116643662baeb1b7bb51ced84278200ad41d1d3a5094f8d28b4b029ce95a4791e18fb39612cd328a3688669927c11d170a69ac3604f9c802db95a81714b99
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNF5Oa7/VC964cx1E2i0nUaxiZTYa7/VC9:iD3JeU7vinrm5OaEBYipkZ41YaE
TLSH
T1F4A47D02A6984FA5E62F8170E5E10596E6737D029F5087CF1364BE253F327C0AE792A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
672	2026-10-11_87d12c388880119c60e2c64087df1eeb_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
672	2026-10-11_87d12c388880119c60e2c64087df1eeb_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-11_87d12c388880119c60e2c64087df1eeb_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-11_87d12c388880119c60e2c64087df1eeb_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:672