596ec80005b09d3fae45d7d533b11ff103ac007ee57e5ae9e776000806cf467f

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 16:50

Target
2026-10-22_3631526bfcfeb2831695fd2c47891a51_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc_vidar_wannacry.exe
Size 4.7MB
Sample261024-vcd2gaa12y
SHA256 596ec80005b09d3fae45d7d533b11ff103ac007ee57e5ae9e776000806cf467f
MD5 3631526bfcfeb2831695fd2c47891a51
SHA1 1c50f13644b609187708e0b0b3a39fcd0c6544c7
SHA512 a6dae32fcb565e3afe05a0ae261e8ca9fa7dd2430d3810b74873357dc413bbbf281bf6d99538f4147029658bb517e8e7c7db4817c411847ce3dea21da92155c5
SSDEEP 49152:k56rLVO88hXl+suygmUSbHDUn8qJtb2I756r+qJtb2IdqJtb2IEeW4SkZP4sz9M5:hrI/h1+YUE9vr+cFfkZcJrX
TLSH
T10F36F715B6B88B61E077D079C5D2969AFA333C425F308BCB0245AB2D3E376D58936732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2352	2026-10-22_3631526bfcfeb2831695fd2c47891a51_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc_vidar_wannacry.exe
2352	2026-10-22_3631526bfcfeb2831695fd2c47891a51_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_3631526bfcfeb2831695fd2c47891a51_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_3631526bfcfeb2831695fd2c47891a51_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_stealc_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2352