General
- Target 2026-06-27_e023bc41452502f5238727c8c01c7c1b_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 153KB
- Sample260629-ch7xmaaz2t
- SHA256 9cf43f3e2deae96ff778bee15f4aa20dddb88bff428dc0b22cdd139cca9e47fd
- MD5 e023bc41452502f5238727c8c01c7c1b
- SHA1 5c6b2d253f4bac1194e512ee2b4661de920163e3
- SHA512 2878a97b9bf4a0ec04c714ecb1bdbb43579cc458f3575634380008f97aecb866cfd55b8f60a282d5314241078217008b31019f8237ec8f28201bdb70be1bd791
- SSDEEP 3072:homCP1RaNVHBVGIwAtxHVGis4xdomCP1vd1AWCx0omCP11dXK6oxF:hVC9Ra7Dzt1xBVC91iSVC9faf
- TLSH T17DF37D03CEA408A1FB570A30B9F519479976BE525A90CBCF633892551F70340FB963FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_e023bc41452502f5238727c8c01c7c1b_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_e023bc41452502f5238727c8c01c7c1b_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_e023bc41452502f5238727c8c01c7c1b_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 153KB
- SHA256 9cf43f3e2deae96ff778bee15f4aa20dddb88bff428dc0b22cdd139cca9e47fd
- MD5 e023bc41452502f5238727c8c01c7c1b
- SHA1 5c6b2d253f4bac1194e512ee2b4661de920163e3
- SHA512 2878a97b9bf4a0ec04c714ecb1bdbb43579cc458f3575634380008f97aecb866cfd55b8f60a282d5314241078217008b31019f8237ec8f28201bdb70be1bd791
- SSDEEP 3072:homCP1RaNVHBVGIwAtxHVGis4xdomCP1vd1AWCx0omCP11dXK6oxF:hVC9Ra7Dzt1xBVC91iSVC9faf
- TLSH T17DF37D03CEA408A1FB570A30B9F519479976BE525A90CBCF633892551F70340FB963FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.