General
- Target 2026-07-03_4331ab2db5ed68274356f779713038bc_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 280KB
- Sample260703-tm8hdscw51
- SHA256 fda61d43e9253d21d2ee336f851d0dd0ec4030fea2c5466b7ba3084ab2b70c2b
- MD5 4331ab2db5ed68274356f779713038bc
- SHA1 a89e022e39916393d1069dd096a351795b384f14
- SHA512 9a4f6a6f60380a9d209007d9cf47eff2d2e7b9cbee56fc3cf5cae28261052c78b1e5e61173dbd195ef620c8557b77105a4c9dc31e35abfcc9ef3a8cf14419503
- SSDEEP 6144:Pc9cnEVC9T4gxoxbRe0MVC9LeIAynYa7oc:k98bscEc0DClaYaoc
- TLSH T180547D12CDA40C96FA164A70B4E50646DDB97E57AAD1C6CF732CC2141F60381BBAA3FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_4331ab2db5ed68274356f779713038bc_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_4331ab2db5ed68274356f779713038bc_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_4331ab2db5ed68274356f779713038bc_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 280KB
- SHA256 fda61d43e9253d21d2ee336f851d0dd0ec4030fea2c5466b7ba3084ab2b70c2b
- MD5 4331ab2db5ed68274356f779713038bc
- SHA1 a89e022e39916393d1069dd096a351795b384f14
- SHA512 9a4f6a6f60380a9d209007d9cf47eff2d2e7b9cbee56fc3cf5cae28261052c78b1e5e61173dbd195ef620c8557b77105a4c9dc31e35abfcc9ef3a8cf14419503
- SSDEEP 6144:Pc9cnEVC9T4gxoxbRe0MVC9LeIAynYa7oc:k98bscEc0DClaYaoc
- TLSH T180547D12CDA40C96FA164A70B4E50646DDB97E57AAD1C6CF732CC2141F60381BBAA3FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.