General
- Target 2026-04-25_efa06231be0b0eca81615d516b1bbc7e_amadey_cobalt-strike_satacom_vidar_wannacry
- Size 1.3MB
- Sample260425-sdvphadx5q
- SHA256 96884e865193ee7fe0018b2322cfd323cd27ce2e38dea8027a3e5c4daa17b9fb
- MD5 efa06231be0b0eca81615d516b1bbc7e
- SHA1 508babe9552e38c04864d851a63ac22c3da0329b
- SHA512 75848134847693cea4fc34f1f635ef5947a96948066a291d17d5be4c970b4db24d06b1f3bcdd152c73fd8347fc74bbcd34743969cec084c1d68e9f9abcf3afe0
- SSDEEP 12288:J5jtarclln5s5jtarclln55wYkUVY3nMkbZ7agwiCageagw:/j8rCn58j8rCn5twMOZmLiboL
- TLSH T16755392967E91545F6B39A78C875C292AE327C205B30D3DF2610B61C2F375D0ED3AB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-25_efa06231be0b0eca81615d516b1bbc7e_amadey_cobalt-strike_satacom_vidar_wannacry.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_efa06231be0b0eca81615d516b1bbc7e_amadey_cobalt-strike_satacom_vidar_wannacry.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_efa06231be0b0eca81615d516b1bbc7e_amadey_cobalt-strike_satacom_vidar_wannacry
- Size 1.3MB
- SHA256 96884e865193ee7fe0018b2322cfd323cd27ce2e38dea8027a3e5c4daa17b9fb
- MD5 efa06231be0b0eca81615d516b1bbc7e
- SHA1 508babe9552e38c04864d851a63ac22c3da0329b
- SHA512 75848134847693cea4fc34f1f635ef5947a96948066a291d17d5be4c970b4db24d06b1f3bcdd152c73fd8347fc74bbcd34743969cec084c1d68e9f9abcf3afe0
- SSDEEP 12288:J5jtarclln5s5jtarclln55wYkUVY3nMkbZ7agwiCageagw:/j8rCn58j8rCn5twMOZmLiboL
- TLSH T16755392967E91545F6B39A78C875C292AE327C205B30D3DF2610B61C2F375D0ED3AB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.