2026-05-29_5222af722d022cdd7deff3e783119b07_amadey_cobalt-strike_hijackloader_satacom_wannacry

General

Target
2026-05-29_5222af722d022cdd7deff3e783119b07_amadey_cobalt-strike_hijackloader_satacom_wannacry
Size 284KB
Sample260529-vg366act4r
SHA256 442b38d57a23b8a405a15b0fc8be916cf9ac8e76e1231262fe9cce1257509428
MD5 5222af722d022cdd7deff3e783119b07
SHA1 f4bcfc4a777e1c8d243709d5a4f4ac622286aa56
SHA512 1fb1894e2239cf07bc0e42d8e12c452984a8ab2eaff94cb1dda774c755c2ff1597355bd1f6e60169f9bf4ed8d286612b49c348e066e47bbd7730637313b389bd
SSDEEP 6144:PCfTXkxqDbVC9AV+krJSj4fozHsxbGvEaL4z6Re5S:PCaAAklpoIb8Hir
TLSH
T15E54084167F900E8F5B79A34D9B24556AA77F8515B30DBCF4224824A2F33BD09E34B36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-29_5222af722d022cdd7deff3e783119b07_amadey_cobalt-strike_hijackloader_satacom_wannacry

2026-05-29_5222af722d022cdd7deff3e783119b07_amadey_cobalt-strike_hijackloader_satacom_wannacry

.exe 284KB

IMPHASH 3325e12181a2525dc192101472612d6a
SHA256 442b38d57a23b8a405a15b0fc8be916cf9ac8e76e1231262fe9cce1257509428
MD5 5222af722d022cdd7deff3e783119b07
SHA1 f4bcfc4a777e1c8d243709d5a4f4ac622286aa56
SHA512 1fb1894e2239cf07bc0e42d8e12c452984a8ab2eaff94cb1dda774c755c2ff1597355bd1f6e60169f9bf4ed8d286612b49c348e066e47bbd7730637313b389bd
SSDEEP 6144:PCfTXkxqDbVC9AV+krJSj4fozHsxbGvEaL4z6Re5S:PCaAAklpoIb8Hir
TLSH
T15E54084167F900E8F5B79A34D9B24556AA77F8515B30DBCF4224824A2F33BD09E34B36
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

2

Major OS version

5

Entry point

10852

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

F:\CB\11X_MainQ\BuildResults\bin\Release\chrome_wow_helper.pdb