General
- Target 2026-06-26_804da9071671d9d201a5266661c00c50_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 171KB
- Sample260629-rxt2msfx8v
- SHA256 be62cb101004cefc5bda2c679ae9763ec99c9c4f1d439d14e67fd9f7b72e6074
- MD5 804da9071671d9d201a5266661c00c50
- SHA1 4cbef6ce0f8aa4a58e86ad1ca411aad8b39903ae
- SHA512 9986acdd6ec90364a56a2adcedea8bd45d4c0777fd816a05c7e84dac4a1c54206e26b5f9903c20387ef10ae02ac00dd8605e72138e5e8ffafcfc67cfa97d3373
- SSDEEP 3072:jaNVH/omCP1lVc2U8xz1Hky8xTV3OqJx+1Hky8xmdr9ebYlx0dXK6oxF:ja7/VC9HJhEpebEqRe0Maf
- TLSH T13D047D13CAA40C96FB164A70B5E5065ADD79BE57AAD1C2CF732C82141F60380B79A3FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_804da9071671d9d201a5266661c00c50_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_804da9071671d9d201a5266661c00c50_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_804da9071671d9d201a5266661c00c50_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 171KB
- SHA256 be62cb101004cefc5bda2c679ae9763ec99c9c4f1d439d14e67fd9f7b72e6074
- MD5 804da9071671d9d201a5266661c00c50
- SHA1 4cbef6ce0f8aa4a58e86ad1ca411aad8b39903ae
- SHA512 9986acdd6ec90364a56a2adcedea8bd45d4c0777fd816a05c7e84dac4a1c54206e26b5f9903c20387ef10ae02ac00dd8605e72138e5e8ffafcfc67cfa97d3373
- SSDEEP 3072:jaNVH/omCP1lVc2U8xz1Hky8xTV3OqJx+1Hky8xmdr9ebYlx0dXK6oxF:ja7/VC9HJhEpebEqRe0Maf
- TLSH T13D047D13CAA40C96FB164A70B5E5065ADD79BE57AAD1C2CF732C82141F60380B79A3FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.