83d6158b46944ee23461d53fabc1fc0ca54819bb2e718019dac4a4a2fddf4618

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 08:25

Target
2026-10-22_755a643118da54c9e76a3b9e665fb904_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 986KB
Sample261024-kbss5aee98
SHA256 83d6158b46944ee23461d53fabc1fc0ca54819bb2e718019dac4a4a2fddf4618
MD5 755a643118da54c9e76a3b9e665fb904
SHA1 9192bedc0b733d24a5395041cdc02c626e4b4d07
SHA512 2597439a1405d9155c7f08ec3be2e7ab0dc71367ec6ba38213d762604b74fc9f13d15b1b2784c317c3e3cc1be85235e6ada9c8ebb71d5191d4d34786f97574ec
SSDEEP 24576:iD5TvinrmdCKaEBiXKahZaEaB0Le5ji0hmxNrM:k56r8Pji0Aj
TLSH
T19C251816F6684F61D07FC075C5D2569AEA733C425F308BCB0395AE683E276D19A3A323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4200	2026-10-22_755a643118da54c9e76a3b9e665fb904_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4200	2026-10-22_755a643118da54c9e76a3b9e665fb904_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_755a643118da54c9e76a3b9e665fb904_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_755a643118da54c9e76a3b9e665fb904_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4200