63782bae399cfaf7dc0614df84972392810fc93666144e8edd9cfdd9a5c898dc

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 12:46

Target
2026-10-22_568cbee79294df4b3d384abadd8d4988_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 993KB
Sample261024-pzqe5ahz21
SHA256 63782bae399cfaf7dc0614df84972392810fc93666144e8edd9cfdd9a5c898dc
MD5 568cbee79294df4b3d384abadd8d4988
SHA1 8d0e0c7821acd6d6ada8d59680afcebdaf8c2450
SHA512 1345e9ed1843ec139c99dab9415949a8fdbc592536507a64379fb21a59a4261013b2dfc677afc359375d22582a154a4bee509d318ccd7af6666a177b83fd56ef
SSDEEP 24576:iD5TvinrmdoTpYagjil/1YTqMi8CtBd2QHCHmTBW5:k56rYqJtb2I
TLSH
T15D251825F6A88F65D07FC075C5D2969AEA333C425F3087CB1245AE283E277D1993A723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
828	2026-10-22_568cbee79294df4b3d384abadd8d4988_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
828	2026-10-22_568cbee79294df4b3d384abadd8d4988_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_568cbee79294df4b3d384abadd8d4988_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_568cbee79294df4b3d384abadd8d4988_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:828