2026-05-29_b0281dda5a9d01c6dae14eb50e41d4cf_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry

General

Target
2026-05-29_b0281dda5a9d01c6dae14eb50e41d4cf_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
Size 789KB
Sample260529-t7lt5ahx21
SHA256 5427082512069c22a8a6b6a1046c6f979ccbafd2d77a1493e227151168e28593
MD5 b0281dda5a9d01c6dae14eb50e41d4cf
SHA1 581c62d4eca92c8e4b1f1f988dabdced409b408d
SHA512 e87b672071c0b38fd560ce5989c4dc68f5d4f4876aa7407f36bea0223a6319a380c6c6c5a636c3a3dbf7377cef4b7d8f94876800255c0c9b816c2d2f50b832bc
SSDEEP 12288:PCGD3JeU7vinrmHEMb8H+ycNQXft2PijkDN7j+aBYR7/+7:PCGD5TvinrmHB411Dq7j+bR7M
TLSH
T18805284A32A44FE5D56F8138C99285A6E773BC555F20D3CF12A0AF6A3F336909D29313
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-29_b0281dda5a9d01c6dae14eb50e41d4cf_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry

2026-05-29_b0281dda5a9d01c6dae14eb50e41d4cf_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry

.exe 789KB

IMPHASH 3325e12181a2525dc192101472612d6a
SHA256 5427082512069c22a8a6b6a1046c6f979ccbafd2d77a1493e227151168e28593
MD5 b0281dda5a9d01c6dae14eb50e41d4cf
SHA1 581c62d4eca92c8e4b1f1f988dabdced409b408d
SHA512 e87b672071c0b38fd560ce5989c4dc68f5d4f4876aa7407f36bea0223a6319a380c6c6c5a636c3a3dbf7377cef4b7d8f94876800255c0c9b816c2d2f50b832bc
SSDEEP 12288:PCGD3JeU7vinrmHEMb8H+ycNQXft2PijkDN7j+aBYR7/+7:PCGD5TvinrmHB411Dq7j+bR7M
TLSH
T18805284A32A44FE5D56F8138C99285A6E773BC555F20D3CF12A0AF6A3F336909D29313
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

2

Major OS version

5

Entry point

10852

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

F:\CB\11X_MainQ\BuildResults\bin\Release\chrome_wow_helper.pdb