General
- Target 2026-05-22_648343e3ab560551e1beffa5016cf7d7_amadey_cobalt-strike_hijackloader_vidar_wannacry
- Size 1.7MB
- Sample260522-txecashy3r
- SHA256 e1d1f583b04b9e0c9af95f75aef73df5bc79a5b95135e4b8a9c672b75684ac30
- MD5 648343e3ab560551e1beffa5016cf7d7
- SHA1 3d83db6247f7ab82292160ca827dc6fe8ea6959c
- SHA512 3b03e244ed9708d6494a94fc19612be13ab59479160167d28a5c8ad0d4dcc1939603e81fd059f2f5f86920002f2a3162da4151da9209170838edce38730dc5e3
- SSDEEP 24576:b1I3R1sy6i1zuxw7ljsarakkqt4nUwtt1+qw9:b1EWy6i1zuajsauZnJnwqS
- TLSH T15D856C2933FC0895E1B79635EA7085019D72B8761734D2CF21A4927E6E37BC09D3AF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_648343e3ab560551e1beffa5016cf7d7_amadey_cobalt-strike_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_648343e3ab560551e1beffa5016cf7d7_amadey_cobalt-strike_hijackloader_vidar_wannacry
- Size 1.7MB
- SHA256 e1d1f583b04b9e0c9af95f75aef73df5bc79a5b95135e4b8a9c672b75684ac30
- MD5 648343e3ab560551e1beffa5016cf7d7
- SHA1 3d83db6247f7ab82292160ca827dc6fe8ea6959c
- SHA512 3b03e244ed9708d6494a94fc19612be13ab59479160167d28a5c8ad0d4dcc1939603e81fd059f2f5f86920002f2a3162da4151da9209170838edce38730dc5e3
- SSDEEP 24576:b1I3R1sy6i1zuxw7ljsarakkqt4nUwtt1+qw9:b1EWy6i1zuajsauZnJnwqS
- TLSH T15D856C2933FC0895E1B79635EA7085019D72B8761734D2CF21A4927E6E37BC09D3AF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.