e5cd9452e31eb745d6569985b2c3d850dcee7a12f0ad95116f3a306619ad66d6

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/10/2026, 20:01

Target
2026-10-21_7dccdf299b79f8e0f944bca15df94687_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 974KB
Sample261022-yr2ymaxv6p
SHA256 e5cd9452e31eb745d6569985b2c3d850dcee7a12f0ad95116f3a306619ad66d6
MD5 7dccdf299b79f8e0f944bca15df94687
SHA1 f42c3f1443bf730205c36738848f5eefc137f949
SHA512 6d747f8e547afbbb3302b8746d3f734f50390e5eaa0f76d7e2820156c81bb7de87eadbbcf7fb8765629407e394f32a614b46b7358d0599a78f4deaff091c6141
SSDEEP 24576:iD5TvinrmdocjPXcRasP0Le5ji0hmxNrM:k56rDPji0Aj
TLSH
T140251816F6A84F65D02BC0B5C5D2569AEA733C425F3087CB03559E283F277D29A3A363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2120	2026-10-21_7dccdf299b79f8e0f944bca15df94687_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
2120	2026-10-21_7dccdf299b79f8e0f944bca15df94687_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-21_7dccdf299b79f8e0f944bca15df94687_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-21_7dccdf299b79f8e0f944bca15df94687_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2120