8cc6cc51151517cf27f2b11fe736784fab610a5824b1294be17dc36e0e2e2cd4

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 03:57

Target
2026-10-22_ec2b0be0a7bc0759da7e72ccba945657_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 426KB
Sample261023-eh2fyswth1
SHA256 8cc6cc51151517cf27f2b11fe736784fab610a5824b1294be17dc36e0e2e2cd4
MD5 ec2b0be0a7bc0759da7e72ccba945657
SHA1 6a476a31960ebf6d7fe594c9b74d80e5e495a4bf
SHA512 0c5149d8ba03cd6da54f8d53bf4d281a92463a78a7b5d41e7d6553096369a71403ba824ce74b0b6769d97c747a5ae9674aba1923d99ac661979bb783ce89f4fc
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNFEVC9qsFLZ5WTSIoXNHnr1GJOl4uvjgddFu:iD3JeU7vinrmbLzWcRGJlFu
TLSH
T1A5940642B2994FA4D6AFA134CC564A52E6377D914F214BEF03A07F3A7E322D0AD35613
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4600	2026-10-22_ec2b0be0a7bc0759da7e72ccba945657_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4600	2026-10-22_ec2b0be0a7bc0759da7e72ccba945657_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_ec2b0be0a7bc0759da7e72ccba945657_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_ec2b0be0a7bc0759da7e72ccba945657_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4600