General
- Target 2026-06-27_1e1a5f7ed3bd3d4079b923935783eff1_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 206KB
- Sample260629-lflfaabz3m
- SHA256 b60c69600a5326dc1a01422ce6087ef8e854f6b0df9632a78e923c5dc99e9e3a
- MD5 1e1a5f7ed3bd3d4079b923935783eff1
- SHA1 566dd66317fd7a9c11bc70089c95528c462f7823
- SHA512 6a001643b3c596fa5cf9260ec8cbb606fff64aea4997ce70b9b7b31508a3ee981149a1ace8e4774a84a49889e9f44a4e2a58923f2689e3d9d7c19843689c35d9
- SSDEEP 6144:hVC9643a7/VC9Ra7Dzt1xBVC91iSVC9faf:mB3aERaHJG85if
- TLSH T169246D03CEA408A1FBA60630B9F519479976BE125A90CFCF5378A6591F70340F6963FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_1e1a5f7ed3bd3d4079b923935783eff1_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_1e1a5f7ed3bd3d4079b923935783eff1_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_1e1a5f7ed3bd3d4079b923935783eff1_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 206KB
- SHA256 b60c69600a5326dc1a01422ce6087ef8e854f6b0df9632a78e923c5dc99e9e3a
- MD5 1e1a5f7ed3bd3d4079b923935783eff1
- SHA1 566dd66317fd7a9c11bc70089c95528c462f7823
- SHA512 6a001643b3c596fa5cf9260ec8cbb606fff64aea4997ce70b9b7b31508a3ee981149a1ace8e4774a84a49889e9f44a4e2a58923f2689e3d9d7c19843689c35d9
- SSDEEP 6144:hVC9643a7/VC9Ra7Dzt1xBVC91iSVC9faf:mB3aERaHJG85if
- TLSH T169246D03CEA408A1FBA60630B9F519479976BE125A90CFCF5378A6591F70340F6963FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.