General
- Target 2026-07-02_b24a43c785927b017b92dffe668f8aed_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 85KB
- Sample260702-yf2hqaas7m
- SHA256 00a22c3fda9a7a428e1870995aa8cb2dbcc34b8cbc567fbf1a682c6bca5dd17c
- MD5 b24a43c785927b017b92dffe668f8aed
- SHA1 53c6da09cb90a7783c09f3c8de7d306c60736f1e
- SHA512 84a1a0696789f584992dd9a5b95d150b456d0379b3ce581a03bf0643383305710aac1fe685074aa4b8a27fbdc37822f073f053308fba590905a6a5fd02de2a59
- SSDEEP 1536:homCEi1PVLkOfZ78PxeKVcefU7YPxvd70f/7oPx/4:homCP1PVLkGZ4xDVc2U8xvd70/sxQ
- TLSH T183837D02CEA40C96FB564A70B8E5065ADD79BE576AD1C6CF332C82141F60780BB963FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_b24a43c785927b017b92dffe668f8aed_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_b24a43c785927b017b92dffe668f8aed_amadey_cobalt-strike_elex_hijackloader_wannacry.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_b24a43c785927b017b92dffe668f8aed_amadey_cobalt-strike_elex_hijackloader_wannacry
- Size 85KB
- SHA256 00a22c3fda9a7a428e1870995aa8cb2dbcc34b8cbc567fbf1a682c6bca5dd17c
- MD5 b24a43c785927b017b92dffe668f8aed
- SHA1 53c6da09cb90a7783c09f3c8de7d306c60736f1e
- SHA512 84a1a0696789f584992dd9a5b95d150b456d0379b3ce581a03bf0643383305710aac1fe685074aa4b8a27fbdc37822f073f053308fba590905a6a5fd02de2a59
- SSDEEP 1536:homCEi1PVLkOfZ78PxeKVcefU7YPxvd70f/7oPx/4:homCP1PVLkGZ4xDVc2U8xvd70/sxQ
- TLSH T183837D02CEA40C96FB564A70B8E5065ADD79BE576AD1C6CF332C82141F60780BB963FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.