General
- Target 2026-06-25_fae265007731f5702506d7e29ae967c4_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 767KB
- Sample260629-xgn4cacy2z
- SHA256 2a8a8ff9fce1240eca5082354844ec387d122c7dd792ff82c6e87fb32d25bc4e
- MD5 fae265007731f5702506d7e29ae967c4
- SHA1 b4df9f3350d76bbc053ec9f147f61322f6a7e6f4
- SHA512 d7ca3bde95425107144c2b18e7a4fe796112f2172924614befec3075ba543639d61dcaf1852e4d2e8c9936787514a42cb9cac98e9f0b8dd54d4d7362c3da639f
- SSDEEP 12288:r0l98bscc0CqRaEgqbaJ1gL5pRTcAkS/3hzN8qE43fm78V:r0l98bsccnqRaEgqba45jcAkSYqyE
- TLSH T180F45C16FA748671E073C1B5C5D2AA8AEE7134865B708ACB1399C3782F237D2D936371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_fae265007731f5702506d7e29ae967c4_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_fae265007731f5702506d7e29ae967c4_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_fae265007731f5702506d7e29ae967c4_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 767KB
- SHA256 2a8a8ff9fce1240eca5082354844ec387d122c7dd792ff82c6e87fb32d25bc4e
- MD5 fae265007731f5702506d7e29ae967c4
- SHA1 b4df9f3350d76bbc053ec9f147f61322f6a7e6f4
- SHA512 d7ca3bde95425107144c2b18e7a4fe796112f2172924614befec3075ba543639d61dcaf1852e4d2e8c9936787514a42cb9cac98e9f0b8dd54d4d7362c3da639f
- SSDEEP 12288:r0l98bscc0CqRaEgqbaJ1gL5pRTcAkS/3hzN8qE43fm78V:r0l98bsccnqRaEgqba45jcAkSYqyE
- TLSH T180F45C16FA748671E073C1B5C5D2AA8AEE7134865B708ACB1399C3782F237D2D936371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.