General
- Target 2026-07-03_724f67ae533a0a9760fb926edc607f9a_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 732KB
- Sample260703-l4c4tae12v
- SHA256 bf4830691bb09517274eb21adbfcf6e1edafc043bf8db01485b043bceee8856f
- MD5 724f67ae533a0a9760fb926edc607f9a
- SHA1 b8811d8513d579d1069b2aa74fce7a1e301a091d
- SHA512 45690a9aa1f67f77d13c22caae0376c190a90aa4c4dd884dc43c198f64227255e468057a211d6350ea81bb305300dec4e68235827b15bfdd547e2f7b8cb56de8
- SSDEEP 12288:a00qTF0DCSc1gL5pRTcAkS/3hzN8qE43fm78VgLF:a0XTF+CS55jcAkSYqyEgLF
- TLSH T1B5F42811E6A48622D0B3C075CDD2AA8AED313D860B308ADB1399F7786F337D6A535771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_724f67ae533a0a9760fb926edc607f9a_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_724f67ae533a0a9760fb926edc607f9a_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_724f67ae533a0a9760fb926edc607f9a_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 732KB
- SHA256 bf4830691bb09517274eb21adbfcf6e1edafc043bf8db01485b043bceee8856f
- MD5 724f67ae533a0a9760fb926edc607f9a
- SHA1 b8811d8513d579d1069b2aa74fce7a1e301a091d
- SHA512 45690a9aa1f67f77d13c22caae0376c190a90aa4c4dd884dc43c198f64227255e468057a211d6350ea81bb305300dec4e68235827b15bfdd547e2f7b8cb56de8
- SSDEEP 12288:a00qTF0DCSc1gL5pRTcAkS/3hzN8qE43fm78VgLF:a0XTF+CS55jcAkSYqyEgLF
- TLSH T1B5F42811E6A48622D0B3C075CDD2AA8AED313D860B308ADB1399F7786F337D6A535771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.