dbb4e35d753c1235257147a08e112c991b3144a1aa36c1c07bcb60b27e0b4e9f

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/10/2026, 22:20

Target
2026-10-21_6e315dc344c35096782be55bb12350de_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 425KB
Sample261022-19bv9sys2j
SHA256 dbb4e35d753c1235257147a08e112c991b3144a1aa36c1c07bcb60b27e0b4e9f
MD5 6e315dc344c35096782be55bb12350de
SHA1 a57eddc9216f7afb5b3f1d4480872e70327b2c29
SHA512 7a1116b87a2eac6d5cefd305d13840e81de1c3d546d0516a929516b25ca619296cf226a39a0b0850597709bd861be5a1f0445221f3d6900ff2ffd9d3815eba13
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNFsI5ay8dnYa7fII4OTlERe0a:iD3JeU7vinrmdoTpYagjilL0a
TLSH
T158947C16A5984FA5E21F8170E4D20596EA737D029F5183CF1358BE253F327C0BE792AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1028	2026-10-21_6e315dc344c35096782be55bb12350de_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1028	2026-10-21_6e315dc344c35096782be55bb12350de_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-21_6e315dc344c35096782be55bb12350de_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-21_6e315dc344c35096782be55bb12350de_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1028