General
- Target 2026-07-03_13010822b0f8de42fe088b299f7bfaa0_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry
- Size 720KB
- Sample260704-aaq8sshv3x
- SHA256 9ed18705fd8ab30d7c09f229b69880beec1e85453c56777950eb0de143ec088c
- MD5 13010822b0f8de42fe088b299f7bfaa0
- SHA1 e4010a0fac89f06e742a7e1c4bc382120d9e67d8
- SHA512 20ce65d718f00b8409c16843106cd4e8406f3af1047f1729512a256f394b4ec1665bc6daeb448c7530e2c28a6e35c41f154d9abf16c2fd942cb17ea302a6df6e
- SSDEEP 12288:r0iZwb5zzFEoS2cPvyrMD3JeU7vinrmVD3JeU7vinrmC:rXZM9zFVSOrMD5TvinrmVD5TvinrmC
- TLSH T1EDF4495672984FE8D56F8178C95249A6E6B37C164F2087CF03A07E2A3E336D0AD39753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_13010822b0f8de42fe088b299f7bfaa0_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_13010822b0f8de42fe088b299f7bfaa0_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_13010822b0f8de42fe088b299f7bfaa0_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry
- Size 720KB
- SHA256 9ed18705fd8ab30d7c09f229b69880beec1e85453c56777950eb0de143ec088c
- MD5 13010822b0f8de42fe088b299f7bfaa0
- SHA1 e4010a0fac89f06e742a7e1c4bc382120d9e67d8
- SHA512 20ce65d718f00b8409c16843106cd4e8406f3af1047f1729512a256f394b4ec1665bc6daeb448c7530e2c28a6e35c41f154d9abf16c2fd942cb17ea302a6df6e
- SSDEEP 12288:r0iZwb5zzFEoS2cPvyrMD3JeU7vinrmVD3JeU7vinrmC:rXZM9zFVSOrMD5TvinrmVD5TvinrmC
- TLSH T1EDF4495672984FE8D56F8178C95249A6E6B37C164F2087CF03A07E2A3E336D0AD39753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.