General
- Target 2026-07-02_deb5048c9494c06a6f08c8cf787b8269_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 776KB
- Sample260702-ttcpasew8m
- SHA256 734c1c1eb3f7cac4c3e6b72e65f6ebe2ffb3185840a3a0c7db2086348a2d41a8
- MD5 deb5048c9494c06a6f08c8cf787b8269
- SHA1 2ccd152d076c90b46a8770765e2c3eea35d3ef54
- SHA512 dbfad94057e091d98349c4709083b691be9bcd3cb5d1e8445559d4329b774c223c075302554a057a979cb3fa43db0e7ed7bcf2c86bc2ff21361d0b1686446a8d
- SSDEEP 24576:jagqOaRapxFjmFYTqMi8CtBd2QHCHmTBW5:PqJtb2I
- TLSH T166051925F6748721E073C0B5C5D2AA9AEE7234425B30CACB124AD76C2F277D6D53A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_deb5048c9494c06a6f08c8cf787b8269_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_deb5048c9494c06a6f08c8cf787b8269_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_deb5048c9494c06a6f08c8cf787b8269_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 776KB
- SHA256 734c1c1eb3f7cac4c3e6b72e65f6ebe2ffb3185840a3a0c7db2086348a2d41a8
- MD5 deb5048c9494c06a6f08c8cf787b8269
- SHA1 2ccd152d076c90b46a8770765e2c3eea35d3ef54
- SHA512 dbfad94057e091d98349c4709083b691be9bcd3cb5d1e8445559d4329b774c223c075302554a057a979cb3fa43db0e7ed7bcf2c86bc2ff21361d0b1686446a8d
- SSDEEP 24576:jagqOaRapxFjmFYTqMi8CtBd2QHCHmTBW5:PqJtb2I
- TLSH T166051925F6748721E073C0B5C5D2AA9AEE7234425B30CACB124AD76C2F277D6D53A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.