General
- Target 2026-07-02_74003ee28b003e944568a0fad8ba472c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
- Size 1.3MB
- Sample260702-y46scaes3x
- SHA256 378216fa19b548cc53074e5e08533f25cc9c88a60c1c06f84c1aa2834cb8bd93
- MD5 74003ee28b003e944568a0fad8ba472c
- SHA1 cc82b494af7f88484dc50cabf2308fdd29807786
- SHA512 1b86dfd26f605196d6a6b4c71e047ab844da40a9c5c6fec0b4a3eb892e83f871dae4dc4509db3878bb46a884e300ab9a2d1f054dcfab207e5074c27b65587ced
- SSDEEP 24576:ChSaagqOaRapbb6Ze0p4Ek4niOkl/A04szE87JKTvmlD5TvinrmC:DeW4SkZP4sz9MbE56rX
- TLSH T14F550915F5788B23D0BBC0B9C5D66A99FA333C465F308BCB02459B283E276D5963533A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_74003ee28b003e944568a0fad8ba472c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_74003ee28b003e944568a0fad8ba472c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_74003ee28b003e944568a0fad8ba472c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
- Size 1.3MB
- SHA256 378216fa19b548cc53074e5e08533f25cc9c88a60c1c06f84c1aa2834cb8bd93
- MD5 74003ee28b003e944568a0fad8ba472c
- SHA1 cc82b494af7f88484dc50cabf2308fdd29807786
- SHA512 1b86dfd26f605196d6a6b4c71e047ab844da40a9c5c6fec0b4a3eb892e83f871dae4dc4509db3878bb46a884e300ab9a2d1f054dcfab207e5074c27b65587ced
- SSDEEP 24576:ChSaagqOaRapbb6Ze0p4Ek4niOkl/A04szE87JKTvmlD5TvinrmC:DeW4SkZP4sz9MbE56rX
- TLSH T14F550915F5788B23D0BBC0B9C5D66A99FA333C465F308BCB02459B283E276D5963533A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.