General
- Target 2026-06-27_dbb82051c234c17902a0e51a8d6bb846_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 1.4MB
- Sample260629-cprtzsa14v
- SHA256 9ab49ed07e292602dd217283abfac716df89f322cacc21fee973fd3d9b0b8416
- MD5 dbb82051c234c17902a0e51a8d6bb846
- SHA1 1363a614448bb8b392c88d90716cb26f48b8ed39
- SHA512 8735d8aaf56749271212e95ee8db11b69988b1e43f0a83da951e9135a2fc7fb39c160eb8151c59840d0b2c9a090b73e021296d41f823d9a0bf940b8730498b30
- SSDEEP 24576:japKwZe0p4Ek4niOkl/A04szE87JKTvmy0Le5ji0hmxNrM:MeW4SkZP4sz9MbBPji0Aj
- TLSH T1AE65E856F5788333D0B3C0B9C5D6AA9AFD7230465B308ACB0246D76C2E277E68636735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_dbb82051c234c17902a0e51a8d6bb846_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_dbb82051c234c17902a0e51a8d6bb846_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_dbb82051c234c17902a0e51a8d6bb846_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 1.4MB
- SHA256 9ab49ed07e292602dd217283abfac716df89f322cacc21fee973fd3d9b0b8416
- MD5 dbb82051c234c17902a0e51a8d6bb846
- SHA1 1363a614448bb8b392c88d90716cb26f48b8ed39
- SHA512 8735d8aaf56749271212e95ee8db11b69988b1e43f0a83da951e9135a2fc7fb39c160eb8151c59840d0b2c9a090b73e021296d41f823d9a0bf940b8730498b30
- SSDEEP 24576:japKwZe0p4Ek4niOkl/A04szE87JKTvmy0Le5ji0hmxNrM:MeW4SkZP4sz9MbBPji0Aj
- TLSH T1AE65E856F5788333D0B3C0B9C5D6AA9AFD7230465B308ACB0246D76C2E277E68636735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.