7f667025656ac645b54f3c0f25b25b954eae2766af368e6d3ab22ad5c56a6a92

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/10/2026, 22:14

Target
2026-10-21_6ecdac1b615bc8994ec5580291495eda_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 883KB
Sample261022-155yjsvtas
SHA256 7f667025656ac645b54f3c0f25b25b954eae2766af368e6d3ab22ad5c56a6a92
MD5 6ecdac1b615bc8994ec5580291495eda
SHA1 51d492c6ec1ed6e6d7ac4b23e488b0ef5363ae18
SHA512 d01210b54259948bc8185c52f9d649f2b6dd634e9e5f763a00289a78e2b3cfd7c235c0e43bbe345ea93dc0453a880540c77adac7575efd71bd002c72cd03bff4
SSDEEP 12288:iD3JeU7vinrmdjQ0jrE0DgYKz1gL5pRTcAkS/3hzN8qE43fm78V:iD5TvinrmdjQyrE+gYKe5jcAkSYqyE
TLSH
T1E0152816E6648F61D07BC0B9C5D2969AEA733C465F3087CB1385AE283F237D19939363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1492	2026-10-21_6ecdac1b615bc8994ec5580291495eda_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1492	2026-10-21_6ecdac1b615bc8994ec5580291495eda_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-21_6ecdac1b615bc8994ec5580291495eda_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-21_6ecdac1b615bc8994ec5580291495eda_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1492