6b0919a2557d9f63604428584402aae4c4860a6468141d7d971f044f3a9e0f11

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 10:19

Target
2026-10-22_680e19d8fde204f8314efbdc095ebe58_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 472KB
Sample261024-mcx6cayv2k
SHA256 6b0919a2557d9f63604428584402aae4c4860a6468141d7d971f044f3a9e0f11
MD5 680e19d8fde204f8314efbdc095ebe58
SHA1 3c3aae84c4e36e318a0de7adc5061fe62b294ebd
SHA512 790f82439aee9a4cd48fc5b883cf98744a3b329cf0958182c76e52c6a7a82f679db4bfec16c5ba78c2d9d89d4f8bc4b45172fef585d0db194748a3c52d30fe71
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNFsI5ay8dnYa7fII4OTB4Di34Dc9O:iD3JeU7vinrmdoTpYagjie2Ig9O
TLSH
T1D3A47C12A5980FA5E61F8170E4D10596EA777D03AF5183CF2358BE253F327C07A792AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5896	2026-10-22_680e19d8fde204f8314efbdc095ebe58_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
5896	2026-10-22_680e19d8fde204f8314efbdc095ebe58_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_680e19d8fde204f8314efbdc095ebe58_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_680e19d8fde204f8314efbdc095ebe58_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5896