General
- Target 2026-06-27_ea69ff8ffd1e6e5f83af9dfdebcdb68d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
- Size 2.4MB
- Sample260629-b32exabx4n
- SHA256 907c368a8fee1adf09b562d5e20a0f35908c4d659d27c1783382156862d97e47
- MD5 ea69ff8ffd1e6e5f83af9dfdebcdb68d
- SHA1 9a6ced8d7556582106367ae722aa8cd8064435d1
- SHA512 bbd8e4213d35f00eec7f206c7dc4e053c0cef781500e5058f6e2463034be54156debcdfa74b4ae298d983f9f0878a549f79ae2dd6daf6b4bb3ca39c99daeb1e5
- SSDEEP 24576:a43mnXoZ6i6cMJlCUQ0l98bsyKaCsT3aRaBU3mnXoZ643mnXoZ6i6cMJlCUQ0l9U:x3kHRJD3k03kHRJ156rTPji0Aj
- TLSH T187B57C17F6A40AA5D02BC174C5D69656EA723C421F3087CF1358DA293F73BD0AB3A366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_ea69ff8ffd1e6e5f83af9dfdebcdb68d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_ea69ff8ffd1e6e5f83af9dfdebcdb68d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_ea69ff8ffd1e6e5f83af9dfdebcdb68d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
- Size 2.4MB
- SHA256 907c368a8fee1adf09b562d5e20a0f35908c4d659d27c1783382156862d97e47
- MD5 ea69ff8ffd1e6e5f83af9dfdebcdb68d
- SHA1 9a6ced8d7556582106367ae722aa8cd8064435d1
- SHA512 bbd8e4213d35f00eec7f206c7dc4e053c0cef781500e5058f6e2463034be54156debcdfa74b4ae298d983f9f0878a549f79ae2dd6daf6b4bb3ca39c99daeb1e5
- SSDEEP 24576:a43mnXoZ6i6cMJlCUQ0l98bsyKaCsT3aRaBU3mnXoZ643mnXoZ6i6cMJlCUQ0l9U:x3kHRJD3k03kHRJ156rTPji0Aj
- TLSH T187B57C17F6A40AA5D02BC174C5D69656EA723C421F3087CF1358DA293F73BD0AB3A366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.