General
- Target 2026-07-02_847a7956797586c995354e3887bed3d6_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry
- Size 1.2MB
- Sample260702-yyvg5aay2m
- SHA256 29961c4518ad4aa51855f726c700078a5eddc9a8dceb758c5c5a7c31ccd429af
- MD5 847a7956797586c995354e3887bed3d6
- SHA1 059e4d6fc514620e8add271ec772dcb9dc55f9ef
- SHA512 328eb2b4dd60fac78095bde868ad96ad5166c31ebb92b8a8f91e65b01d9c69bf62cacd1b212e008131dd9e07e5da0dd79b46c13939ac8d49935f6ca4de3d745e
- SSDEEP 24576:jagqOaRapbb6Ze0p4Ek4niOkl/A04szE87JKTvmlD5TvinrmC:MeW4SkZP4sz9MbE56rX
- TLSH T17C45F715F5788B23D0BBC0B9C5D66A99FA333C455F308BCB0245AB283E276D5863573A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_847a7956797586c995354e3887bed3d6_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_847a7956797586c995354e3887bed3d6_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_847a7956797586c995354e3887bed3d6_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry
- Size 1.2MB
- SHA256 29961c4518ad4aa51855f726c700078a5eddc9a8dceb758c5c5a7c31ccd429af
- MD5 847a7956797586c995354e3887bed3d6
- SHA1 059e4d6fc514620e8add271ec772dcb9dc55f9ef
- SHA512 328eb2b4dd60fac78095bde868ad96ad5166c31ebb92b8a8f91e65b01d9c69bf62cacd1b212e008131dd9e07e5da0dd79b46c13939ac8d49935f6ca4de3d745e
- SSDEEP 24576:jagqOaRapbb6Ze0p4Ek4niOkl/A04szE87JKTvmlD5TvinrmC:MeW4SkZP4sz9MbE56rX
- TLSH T17C45F715F5788B23D0BBC0B9C5D66A99FA333C455F308BCB0245AB283E276D5863573A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.