General
- Target 2026-06-29_fb796349cb806720b2a7a045a32b4da3_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 823KB
- Sample260630-bbwqcact6p
- SHA256 6877724d63b4daa6e397dbb273928a7d9551b96f4c9db39b59ee408eddf004c6
- MD5 fb796349cb806720b2a7a045a32b4da3
- SHA1 a6e768ca6a8a4d12dbe5d2b06389fc1a70a55e67
- SHA512 bfdbfe853c2693699ce1acd4987062fa007ff58e7d051ba171043da6933ffd2bc131ecb845ccab89427fa24695f8e0c0888ae68a5e8e585c51a65c0f53b330ce
- SSDEEP 12288:Bb8JLFb32GPAXZNYVLeyUji0h90ZD0wxpGZIVuKrHs:Bb8JL532GPg0Le5ji0hmxNrM
- TLSH T100053816F6B44721D0B3C0B5C8D6968AE9313D821B308ADB1399F7786E337D6A636731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_fb796349cb806720b2a7a045a32b4da3_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_fb796349cb806720b2a7a045a32b4da3_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_fb796349cb806720b2a7a045a32b4da3_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 823KB
- SHA256 6877724d63b4daa6e397dbb273928a7d9551b96f4c9db39b59ee408eddf004c6
- MD5 fb796349cb806720b2a7a045a32b4da3
- SHA1 a6e768ca6a8a4d12dbe5d2b06389fc1a70a55e67
- SHA512 bfdbfe853c2693699ce1acd4987062fa007ff58e7d051ba171043da6933ffd2bc131ecb845ccab89427fa24695f8e0c0888ae68a5e8e585c51a65c0f53b330ce
- SSDEEP 12288:Bb8JLFb32GPAXZNYVLeyUji0h90ZD0wxpGZIVuKrHs:Bb8JL532GPg0Le5ji0hmxNrM
- TLSH T100053816F6B44721D0B3C0B5C8D6968AE9313D821B308ADB1399F7786E337D6A636731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.