General
- Target 2026-07-02_a4d277c0ec5c0531232c1282c5e47bc9_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 895KB
- Sample260702-yl4v2aav3l
- SHA256 45949809efbc43c34d925b64c8d3adbfcd8e11823402a1f78cf8636574fe8d87
- MD5 a4d277c0ec5c0531232c1282c5e47bc9
- SHA1 b5bfd20decf3a2232576c9a8e379c3c7a11b014c
- SHA512 da168390484236040aca9809d154b735897d4f8e374bdd4455a3b92c47ecb351b858f68bcfcccac504856c6a749ce2951496aa06287818f48eab23326bae1592
- SSDEEP 24576:r0l98bRaRaiGKciNcPMYTqMi8CtBd2QHCHmTBW5:bqJtb2I
- TLSH T17C152925F6748761E073C0B5C5D2AA9AEE7234825B308ACB134AD32C2F277D6D53A771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_a4d277c0ec5c0531232c1282c5e47bc9_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_a4d277c0ec5c0531232c1282c5e47bc9_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_a4d277c0ec5c0531232c1282c5e47bc9_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 895KB
- SHA256 45949809efbc43c34d925b64c8d3adbfcd8e11823402a1f78cf8636574fe8d87
- MD5 a4d277c0ec5c0531232c1282c5e47bc9
- SHA1 b5bfd20decf3a2232576c9a8e379c3c7a11b014c
- SHA512 da168390484236040aca9809d154b735897d4f8e374bdd4455a3b92c47ecb351b858f68bcfcccac504856c6a749ce2951496aa06287818f48eab23326bae1592
- SSDEEP 24576:r0l98bRaRaiGKciNcPMYTqMi8CtBd2QHCHmTBW5:bqJtb2I
- TLSH T17C152925F6748761E073C0B5C5D2AA9AEE7234825B308ACB134AD32C2F277D6D53A771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.