a7d2b457c6b99f19605d837480322a9b46d1ffe432d92de480d8f47830b3a4bc

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 15:19

Target
2026-10-26_6a2d9d5813e3311eca00eb5433bc3209_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.2MB
Sample261027-sqpc9adh36
SHA256 a7d2b457c6b99f19605d837480322a9b46d1ffe432d92de480d8f47830b3a4bc
MD5 6a2d9d5813e3311eca00eb5433bc3209
SHA1 2605ce8823f509c0e08f959c9136295815c9188e
SHA512 fc01f5190002d421253da73a1ecb83be41aa9ff60c21571304ebade9d300e713c7eb55b0e11cba9bf0337f45093910d3b5091d25a937aac07f315d598e5980dd
SSDEEP 24576:iD5TvinrmdoTpYagsgNaoND5TvinrmgdYTqMi8CtBd2QHCHmTBW5:k56rk56rMqJtb2I
TLSH
T1E8551815F5A88F61D06FC074C9D2569AEA333C425F208BDB1245BF293E376D1A93A723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1224	2026-10-26_6a2d9d5813e3311eca00eb5433bc3209_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1224	2026-10-26_6a2d9d5813e3311eca00eb5433bc3209_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-26_6a2d9d5813e3311eca00eb5433bc3209_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-26_6a2d9d5813e3311eca00eb5433bc3209_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1224