2026-05-30_7a64714505ea781f0ea5e43a08698c00_amadey_cobalt-strike_hijackloader_luca-stealer_njrat_remcos_satacom_vidar_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-30_7a64714505ea781f0ea5e43a08698c00_amadey_cobalt-strike_hijackloader_luca-stealer_njrat_remcos_satacom_vidar_wannacry
Size 596KB
Sample260530-snmrmsgw8w
SHA256 22b11169cb786a86317a41efd03ffecf98a125e73903ec19e53ea0e82a0f7025
MD5 7a64714505ea781f0ea5e43a08698c00
SHA1 db1283fce8c2cc08bfa38f1896550c111fc4ed09
SHA512 0b99f4d75ed63dcd4e3bf7614b4911ebf1ab497bf1269cc75862b45c681a228397a12e1e27d2562ca3f88c43c60c3cb8dcd0288fcc4963ee5aaafa2a7329fe77
SSDEEP 12288:qBKwZC2tDclPS2MV7IPCa5e4VQjGARQNhiB:qYwZCUUSf1IPCa5yCAR0iB
TLSH
T129D48D53769440FAC163A23889968662F779BC110B61CBDF13807B3E1F726D1BE39B61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-30_7a64714505ea781f0ea5e43a08698c00_amadey_cobalt-strike_hijackloader_luca-stealer_njrat_remcos_satacom_vidar_wannacry

File Explorer

2026-05-30_7a64714505ea781f0ea5e43a08698c00_amadey_cobalt-strike_hijackloader_luca-stealer_njrat_remcos_satacom_vidar_wannacry

.exe 596KB

2026-05-30_7a64714505ea781f0ea5e43a08698c00_amadey_cobalt-strike_hijackloader_luca-stealer_njrat_remcos_satacom_vidar_wannacry

IMPHASH f065181595a147a76f6dd4758d2144f4
SHA256 22b11169cb786a86317a41efd03ffecf98a125e73903ec19e53ea0e82a0f7025
MD5 7a64714505ea781f0ea5e43a08698c00
SHA1 db1283fce8c2cc08bfa38f1896550c111fc4ed09
SHA512 0b99f4d75ed63dcd4e3bf7614b4911ebf1ab497bf1269cc75862b45c681a228397a12e1e27d2562ca3f88c43c60c3cb8dcd0288fcc4963ee5aaafa2a7329fe77
SSDEEP 12288:qBKwZC2tDclPS2MV7IPCa5e4VQjGARQNhiB:qYwZCUUSf1IPCa5yCAR0iB
TLSH
T129D48D53769440FAC163A23889968662F779BC110B61CBDF13807B3E1F726D1BE39B61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69552

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\T\M\BuildResults\bin\Release_x64\Eula.pdb

kernel32

GetCurrentThreadId GetProcAddress LoadResource LockResource FindResourceW GlobalAlloc GlobalUnlock GlobalLock GlobalHandle GlobalFree MulDiv lstrcmpW lstrcpynW lstrcpyW lstrcatW lstrlenW GetPrivateProfileIntW GetPrivateProfileStringW CopyFileW MultiByteToWideChar DecodePointer VirtualFree VirtualAlloc FlushInstructionCache EnterCriticalSection InterlockedPopEntrySList GetProcessHeap HeapFree HeapAlloc EncodePointer OutputDebugStringW InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleHandleW GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive RaiseException GetFullPathNameW FindFirstFileW FindClose QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW LeaveCriticalSection LoadLibraryW GetModuleHandleExW GetModuleFileNameW DeleteCriticalSection InitializeCriticalSectionAndSpinCount SetLastError GetLastError OutputDebugStringA GetCurrentProcess InterlockedPushEntrySList LoadLibraryExA

user32

SetWindowContextHelpId GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW RedrawWindow InvalidateRgn InvalidateRect EndPaint BeginPaint ReleaseDC GetDC GetSystemMetrics GetDesktopWindow ClientToScreen UnregisterClassW RegisterWindowMessageW SendMessageW DefWindowProcW CallWindowProcW RegisterClassExW GetClassInfoExW CreateWindowExW IsWindow IsChild DestroyWindow MoveWindow SetWindowPos DialogBoxIndirectParamW ScreenToClient GetSysColor FillRect GetWindowLongW SetWindowLongW GetParent MapDialogRect LoadCursorW GetWindow CreateAcceleratorTableW GetClassNameW SetWindowLongPtrW DestroyAcceleratorTable EndDialog GetDlgItem SetDlgItemTextW GetDlgItemTextW SendDlgItemMessageW CharNextW SetFocus GetActiveWindow GetFocus SetCapture ReleaseCapture EnableWindow IsWindowEnabled GetWindowLongPtrW

gdi32

SelectObject GetStockObject GetDeviceCaps DeleteObject DeleteDC CreateSolidBrush CreateCompatibleDC CreateCompatibleBitmap GetObjectW BitBlt

advapi32

RegSetValueExW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

ole32

OleInitialize OleUninitialize OleLockRunning CoTaskMemAlloc StringFromGUID2 CLSIDFromProgID CLSIDFromString CoCreateInstance CoReleaseServerProcess CoAddRefServerProcess CoGetClassObject CreateStreamOnHGlobal CoTaskMemFree

oleaut32

OleCreateFontIndirect DispCallFunc LoadRegTypeLi LoadTypeLi VariantClear VariantInit SysStringLen SysAllocStringLen SysAllocString SysFreeString

vcruntime140

memcmp memset __std_terminate __current_exception_context __current_exception memcpy __C_specific_handler __std_exception_copy __std_exception_destroy _CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line _initterm _initterm_e exit _exit _c_exit _configure_wide_argv _set_app_type _seh_filter_exe _errno terminate _cexit _initialize_wide_environment _register_thread_local_exe_atexit_callback _crt_atexit _register_onexit_function _initialize_onexit_table _invalid_parameter_noinfo

api-ms-win-crt-heap-l1-1-0

malloc calloc free _recalloc _callnewh _set_new_mode

api-ms-win-crt-convert-l1-1-0

_wtoi64 _wtoi

api-ms-win-crt-string-l1-1-0

wcsncpy_s wcscspn wcscpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s __p__commode _set_fmode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-30_7a64714505ea781f0ea5e43a08698c00_amadey_cobalt-strike_hijackloader_luca-stealer_njrat_remcos_satacom_vidar_wannacry

kernel32

user32

gdi32

advapi32

ole32

oleaut32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic