General
- Target 2026-07-03_63e186d656b0a3db2203bb9a4eebebe0_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 313KB
- Sample260703-dhe3aafw2k
- SHA256 973bf49d8f4af2c0b9172e05d69eab022065fc0ce80a312d1a6e3019b176fd00
- MD5 63e186d656b0a3db2203bb9a4eebebe0
- SHA1 2bbb7573c91091e3c85499bb4de0237695c0bbd3
- SHA512 6f1154a6c2cdb06e0cfc6c7b9ca868a98c8a6e952ef9146f2c76f01cb5a07da86824518a2a0b235407bf5edfce46c242b4fbb26e64a052f1a47181abe29d7bb8
- SSDEEP 6144:Q4rQPec9cnEVC9T4gxbRe0Bb4ziIRe0KRe0MVC9:r0l98bscc0BEOH0N0D
- TLSH T1C1648D13CDA40C96FA064A70B4E5065ADDB9BE47AAD1C3CB732CC1141F617817BAA2FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_63e186d656b0a3db2203bb9a4eebebe0_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_63e186d656b0a3db2203bb9a4eebebe0_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_63e186d656b0a3db2203bb9a4eebebe0_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 313KB
- SHA256 973bf49d8f4af2c0b9172e05d69eab022065fc0ce80a312d1a6e3019b176fd00
- MD5 63e186d656b0a3db2203bb9a4eebebe0
- SHA1 2bbb7573c91091e3c85499bb4de0237695c0bbd3
- SHA512 6f1154a6c2cdb06e0cfc6c7b9ca868a98c8a6e952ef9146f2c76f01cb5a07da86824518a2a0b235407bf5edfce46c242b4fbb26e64a052f1a47181abe29d7bb8
- SSDEEP 6144:Q4rQPec9cnEVC9T4gxbRe0Bb4ziIRe0KRe0MVC9:r0l98bscc0BEOH0N0D
- TLSH T1C1648D13CDA40C96FA064A70B4E5065ADDB9BE47AAD1C3CB732CC1141F617817BAA2FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.