e10678eb315186c1a263552429a0fc892090d2ee3e7b8cca1d608c0a1b301616

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/11/2026, 17:22

Target
2026-11-11_10070ceccd16fa4800936d374d5e8af1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 431KB
Sample261113-vxtmnad18w
SHA256 e10678eb315186c1a263552429a0fc892090d2ee3e7b8cca1d608c0a1b301616
MD5 10070ceccd16fa4800936d374d5e8af1
SHA1 ba8cfc7e1ea7ff6388b81b8bab126d60a9add4dd
SHA512 2a82ff2101c364235eeaf863fffe4af58c558193bce8a5d50b0a533c17d46fdad8249482d11cc5e1719a8d7f0076242d6dd46235cbc1bab74a32e0d66a3f7672
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNFsIHiKa7/VC9fIqbERe0ka7CxCc:iD3JeU7vinrmdCKaEgqbL0kaaCc
TLSH
T14B947D16A6984FA5E61F8170E4E20596E7737C029F5087CF1364BE253F327C0AE792A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1180	2026-11-11_10070ceccd16fa4800936d374d5e8af1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1180	2026-11-11_10070ceccd16fa4800936d374d5e8af1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-11_10070ceccd16fa4800936d374d5e8af1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-11_10070ceccd16fa4800936d374d5e8af1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1180