General
- Target 2026-06-27_d8e4ff054358c1fe96b99268b00f2b4b_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 2.5MB
- Sample260629-ctn9nact2n
- SHA256 c27c9a833db812be782ca4d136801490956d2801e9e18f8255bc4f740f1cc11e
- MD5 d8e4ff054358c1fe96b99268b00f2b4b
- SHA1 b4cc43e712f55e6fe92c35683226c3118238c526
- SHA512 720d37fe96136ca304476c3983fcbaf024758da2daefe88afebd8fe4e02c7f877b0e6f726ef825a8122d84ff25822a2f98a6c2af9910aaa24bec6e1a8ffd87a3
- SSDEEP 49152:SpYqOqJtb2IEeW4SkZP4sz9MbkqJtb2I:S6lFfkZck
- TLSH T1F0C5E925F6788732D0B3D0B9C5D2AA9AFE3234465B308ACB1246D76C2E277D6C536731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_d8e4ff054358c1fe96b99268b00f2b4b_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_d8e4ff054358c1fe96b99268b00f2b4b_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win11ltsc2024-20260618-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_d8e4ff054358c1fe96b99268b00f2b4b_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 2.5MB
- SHA256 c27c9a833db812be782ca4d136801490956d2801e9e18f8255bc4f740f1cc11e
- MD5 d8e4ff054358c1fe96b99268b00f2b4b
- SHA1 b4cc43e712f55e6fe92c35683226c3118238c526
- SHA512 720d37fe96136ca304476c3983fcbaf024758da2daefe88afebd8fe4e02c7f877b0e6f726ef825a8122d84ff25822a2f98a6c2af9910aaa24bec6e1a8ffd87a3
- SSDEEP 49152:SpYqOqJtb2IEeW4SkZP4sz9MbkqJtb2I:S6lFfkZck
- TLSH T1F0C5E925F6788732D0B3D0B9C5D2AA9AFE3234465B308ACB1246D76C2E277D6C536731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.