General
- Target 2026-06-27_a2994b25b0b30a8f0f72d9da58eb94cf_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 2.9MB
- Sample260629-e2j11ses7k
- SHA256 1e8ffb50434ea86d7eca2dce072fa55ad4a8eb2a70e3c0a1045d8c2a6dac6681
- MD5 a2994b25b0b30a8f0f72d9da58eb94cf
- SHA1 b6376463ed43701829bb6ebe1a40fd044f24fde5
- SHA512 42739bb4119084e50e5f0b1ee821c102a90a067517960100c300fc6261454b257b3ec25d346a8b9b4b94b5ca4df757ed325ab5d6a74401c6577405673998d69f
- SSDEEP 49152:9eW4SkZP4sz9Mb5eW4SkZP4sz9MbheW4SkZP4sz9Mb:hfkZcNfkZc1fkZc
- TLSH T1F6D5F956F5788723D0B3C0B9C5D7AA99FD3234465B308ACB024AD32C2E277D69636739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_a2994b25b0b30a8f0f72d9da58eb94cf_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_a2994b25b0b30a8f0f72d9da58eb94cf_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_a2994b25b0b30a8f0f72d9da58eb94cf_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 2.9MB
- SHA256 1e8ffb50434ea86d7eca2dce072fa55ad4a8eb2a70e3c0a1045d8c2a6dac6681
- MD5 a2994b25b0b30a8f0f72d9da58eb94cf
- SHA1 b6376463ed43701829bb6ebe1a40fd044f24fde5
- SHA512 42739bb4119084e50e5f0b1ee821c102a90a067517960100c300fc6261454b257b3ec25d346a8b9b4b94b5ca4df757ed325ab5d6a74401c6577405673998d69f
- SSDEEP 49152:9eW4SkZP4sz9Mb5eW4SkZP4sz9MbheW4SkZP4sz9Mb:hfkZcNfkZc1fkZc
- TLSH T1F6D5F956F5788723D0B3C0B9C5D7AA99FD3234465B308ACB024AD32C2E277D69636739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.