75b42be3dcf42af6b0f209a72cebf9277e814adce508fe14a45d727ae8c1d49e

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/10/2026, 20:02

Target
2026-10-22_ce5bf473f41cbe9d3cc6fb3b92b6b8e6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 2.1MB
Sample261023-yr8feade57
SHA256 75b42be3dcf42af6b0f209a72cebf9277e814adce508fe14a45d727ae8c1d49e
MD5 ce5bf473f41cbe9d3cc6fb3b92b6b8e6
SHA1 433d6d59c49636b908c6736bdf514e7e9b550a94
SHA512 31df7ee95315fca9a66e097a5531595b33cbbbc8c3271c493c7cefcd50f63a27834e44f4f62b932e9bd74d36a8f4196052df5ddcda784e3f584d1f3738ac165b
SSDEEP 49152:k56rbeW4SkZP4sz9MbmeW4SkZP4sz9MbE56r:hr7fkZc+fkZcBr
TLSH
T10CA5D615B5788B23D0BBC0B9C5D6AA99FA333C455F308BCB0245AB2C3E276D58536727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2932	2026-10-22_ce5bf473f41cbe9d3cc6fb3b92b6b8e6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
2932	2026-10-22_ce5bf473f41cbe9d3cc6fb3b92b6b8e6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_ce5bf473f41cbe9d3cc6fb3b92b6b8e6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_ce5bf473f41cbe9d3cc6fb3b92b6b8e6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2932