General
- Target 2026-06-25_1ae06560dc024da11eacd979d6bb8741_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 985KB
- Sample260629-3vgjbaa17q
- SHA256 0ad1e31fd54cc849c90d71c2a838e4cabd993ba864b9745f9a9f37e56c1e8014
- MD5 1ae06560dc024da11eacd979d6bb8741
- SHA1 d1e766ca97407427d0c681c63d61fc2a6249d877
- SHA512 ef7c91e3de6262770811988588cf47c51f3618e6a833753eb342d297d2892bf08d6edc82c1f1ada915a6cf9b8e67f1cbf7614c4af48ac2d4ca59b2c5543369aa
- SSDEEP 24576:jaEg6EaiTGZe0p4Ek4niOkl/A04szE87JKTvm:VeW4SkZP4sz9Mb
- TLSH T11025E856F5788723D0B3C0B9C5D7AA99FD3234465B308ACB024AD36C2E276D6C636739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_1ae06560dc024da11eacd979d6bb8741_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_1ae06560dc024da11eacd979d6bb8741_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_1ae06560dc024da11eacd979d6bb8741_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 985KB
- SHA256 0ad1e31fd54cc849c90d71c2a838e4cabd993ba864b9745f9a9f37e56c1e8014
- MD5 1ae06560dc024da11eacd979d6bb8741
- SHA1 d1e766ca97407427d0c681c63d61fc2a6249d877
- SHA512 ef7c91e3de6262770811988588cf47c51f3618e6a833753eb342d297d2892bf08d6edc82c1f1ada915a6cf9b8e67f1cbf7614c4af48ac2d4ca59b2c5543369aa
- SSDEEP 24576:jaEg6EaiTGZe0p4Ek4niOkl/A04szE87JKTvm:VeW4SkZP4sz9Mb
- TLSH T11025E856F5788723D0B3C0B9C5D7AA99FD3234465B308ACB024AD36C2E276D6C636739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.