7904a140165e98b4715befa7c54e2c31b8df6b2bcb7f5a41cb011def9bfd6a6f

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 15:00

Target
2026-11-11_2db7aa25f53df9e2b1e4877400ac8de1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 591KB
Sample261113-sdmnwscz4p
SHA256 7904a140165e98b4715befa7c54e2c31b8df6b2bcb7f5a41cb011def9bfd6a6f
MD5 2db7aa25f53df9e2b1e4877400ac8de1
SHA1 485b949879fa057463f036649ff34de8799dce48
SHA512 befe8aa3a04c4f2bf9d021245e2cef11b14f26b5e91759f4298dac4fdf351cf55fab48eea8bde49fcc4f2753472c54373a902a98bcffef53089171469d8b794f
SSDEEP 12288:iD3JeU7vinrmdCKaEgqbL0dND3JeU7vinrmC:iD5TvinrmdCKaEgqbLKND5TvinrmC
TLSH
T105D46B1666984FA5E22F8174D99245A6E7733C029F2187CF1360BE393F327C0AE79257
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1848	2026-11-11_2db7aa25f53df9e2b1e4877400ac8de1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1848	2026-11-11_2db7aa25f53df9e2b1e4877400ac8de1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-11_2db7aa25f53df9e2b1e4877400ac8de1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-11_2db7aa25f53df9e2b1e4877400ac8de1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1848