ea92d76f01467bba21b615bd6037c5e0e8247ebe97cf618cee13fd657668f64d

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 03:48

Target
2026-10-22_9796cafbbc2daa8fb082f48bdfeb13c8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.3MB
Sample261024-ec5anastcz
SHA256 ea92d76f01467bba21b615bd6037c5e0e8247ebe97cf618cee13fd657668f64d
MD5 9796cafbbc2daa8fb082f48bdfeb13c8
SHA1 f28d3419dd4e040adb7ffcb086f86079d51dc123
SHA512 f89a61ff0e7f0a1b242dcf195c119dc9fc06267dec8ea68e87ed7561d915cc23f3cb263bc2624fb2996cda4cc03a5d240276529a71b49ee0515dbd96ad7d8e7e
SSDEEP 24576:iD5TvinrmdCKaEBiXKaBi5jcAkSYqyEuw35jcAkSYqyE:k56r8pYqVpYq
TLSH
T1F2551815F6648B61D07BC0B9C5D2A69AEA333C464F308BCB1285DA683F277D29935733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1444	2026-10-22_9796cafbbc2daa8fb082f48bdfeb13c8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1444	2026-10-22_9796cafbbc2daa8fb082f48bdfeb13c8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_9796cafbbc2daa8fb082f48bdfeb13c8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_9796cafbbc2daa8fb082f48bdfeb13c8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1444