29c1d1c2cd2f91c3f79466522dd5454115f5b7c3e01e14affc5aacfdd4db1847

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 15:23

Target
2026-10-22_411546dc7f65136cc2a21d457d5e46cd_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 921KB
Sample261024-ssshpacv2j
SHA256 29c1d1c2cd2f91c3f79466522dd5454115f5b7c3e01e14affc5aacfdd4db1847
MD5 411546dc7f65136cc2a21d457d5e46cd
SHA1 cd2a66c9b676f11982a4363f53f0feed277911d7
SHA512 4f8cbf103a8945eeb0ab757fe1afcd2163430386175ded4f7baebd3e9aa198be068c51ec7618c21871e255ac77c8159dfafd3b8875cd8b9ce001e7e5c9b490c5
SSDEEP 24576:iD5TvinrmdoTpYagjiVOovh5jcAkSYqyE:k56rzpYq
TLSH
T182152816E6648F61D07BC0B9C5D2569AEA733C465F3087CB1349AE283F237D1993A363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5636	2026-10-22_411546dc7f65136cc2a21d457d5e46cd_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
5636	2026-10-22_411546dc7f65136cc2a21d457d5e46cd_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_411546dc7f65136cc2a21d457d5e46cd_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_411546dc7f65136cc2a21d457d5e46cd_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5636

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1948