511cdec281615801adca4a21b54c16cb6e99a1768c8686b8f2c0e754d863b6dd

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 04:20

Target
2026-10-22_944519bd2c9a5dc45d0294f2fc2cb61a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 463KB
Sample261024-ex5f6aw13p
SHA256 511cdec281615801adca4a21b54c16cb6e99a1768c8686b8f2c0e754d863b6dd
MD5 944519bd2c9a5dc45d0294f2fc2cb61a
SHA1 36dc59ae6b46838f738f84f94486bf63ad8831c8
SHA512 30d128eace2247df51f56518bc3f5565b3cf866c695cddbadb22f1c925e6fc878f870b721f345f922ec2ce27332a9052dc0ff9ba3bd12640694268204a919283
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNF5Oa7/VC964cxw41aNRe0tAMaNRe0UI9:iD3JeU7vinrm5OaEBYLki0mBi0l9
TLSH
T1E3A47D16A6984FA5E61F8170E4D10596EA737D029F5083CF1368BE253F327C0BE792A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4716	2026-10-22_944519bd2c9a5dc45d0294f2fc2cb61a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4716	2026-10-22_944519bd2c9a5dc45d0294f2fc2cb61a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_944519bd2c9a5dc45d0294f2fc2cb61a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_944519bd2c9a5dc45d0294f2fc2cb61a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4716