0584d595c83bf7a071fa429f055d3d274c627153beca8fdcf1174403d4d4765e

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 04:14

Target
2026-10-22_94db6c2c38b475e602e89c1d3dff744d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.8MB
Sample261024-et3hdssth1
SHA256 0584d595c83bf7a071fa429f055d3d274c627153beca8fdcf1174403d4d4765e
MD5 94db6c2c38b475e602e89c1d3dff744d
SHA1 f975309717465dfa9c2a597651004fda4188fb60
SHA512 2843ba672c743a2b818529b9e4d0d684abd377dd289a6abafb618f3949391ed0bb3cde4c9719bd7f733562c1f2c542223ac07e75c36cd4840b29e9194352087d
SSDEEP 24576:iD5TvinrmVD5TvinrmGZe0p4Ek4niOkl/A04szE87JKTvmLL25jcAkSYqyE:k56ru56rbeW4SkZP4sz9MbvpYq
TLSH
T14785C515B5788B22D0BBD0B9C9D2AA99FA333C454F208BCB0245BF283E376D59535727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4640	2026-10-22_94db6c2c38b475e602e89c1d3dff744d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4640	2026-10-22_94db6c2c38b475e602e89c1d3dff744d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_94db6c2c38b475e602e89c1d3dff744d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_94db6c2c38b475e602e89c1d3dff744d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4640