84d537a4322fdd16f68214b70adaaa04e0c354427e234fa15f7522bec54da26c

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/10/2026, 22:48

Target
2026-10-15_f5a589df63d2f2111c4933c0f51ea986_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.9MB
Sample261015-2rcwaaev3m
SHA256 84d537a4322fdd16f68214b70adaaa04e0c354427e234fa15f7522bec54da26c
MD5 f5a589df63d2f2111c4933c0f51ea986
SHA1 a956055fa420ae72606a0af22cf03d2077505586
SHA512 6cbb6f7ee2d9f8faf6e080f85993ae4213f25306b5ec5ab03b78e11180c9377c65c4875617e0888f0ba60d4755a476103ca70dc18aff7c436532cfde3b97620e
SSDEEP 24576:iD5TvinrmdoTpYagscgjbNs5jcAkSYqyEoD5TvinrmrTYTqMi8CtBd2QHCHmTBWq:k56rEpYq+56r5qJtb2It
TLSH
T14595D415E2648B65D06F8075C792569AFA333C425FE087CB12C5EA3C3F266D199FA323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5668	2026-10-15_f5a589df63d2f2111c4933c0f51ea986_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
5668	2026-10-15_f5a589df63d2f2111c4933c0f51ea986_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-15_f5a589df63d2f2111c4933c0f51ea986_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-15_f5a589df63d2f2111c4933c0f51ea986_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5668