21e41ba15481ec103a580f560d0980a232a7921503e86dcf9b499b2cce54be7c

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 23:09

Target
2026-10-22_028d3bafb0c8088d253c346032720deb_amadey_cobalt-strike_hijackloader_redline-stealer_rhadam.exe
Size 1.1MB
Sample261024-25csfaex2l
SHA256 21e41ba15481ec103a580f560d0980a232a7921503e86dcf9b499b2cce54be7c
MD5 028d3bafb0c8088d253c346032720deb
SHA1 a544604d2f2e24928f4a3b086def2db8ba1969f5
SHA512 dca93d2058350da0472923c3bdb7c542ac43531d3ebe4dd3e54ae2da83f97a0e09f2d7a5953823e239feca852bae0cd293e2e237bf66372ccf9aa7c4117de513
SSDEEP 24576:uBfYccZe0p4Ek4niOkl/A04szE87JKTvmeI1H:DeW4SkZP4sz9MblI1H
TLSH
T13A350916F5B88323D0B3D0B9C5D6AA9AFD3234465B308ACB1249D32C2E277D6D635739
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2026-10-22_028d3bafb0c8088d253c346032720deb_amadey_cobalt-strike_hijackloader_redline-stealer_rhadam.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_028d3bafb0c8088d253c346032720deb_amadey_cobalt-strike_hijackloader_redline-stealer_rhadam.exe"
1⤵
PID:960

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2912