General
- Target 2026-07-06_56acb73b36ff1525c60bc6fa0e900e0f_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
- Size 1.1MB
- Sample260706-1c3mqag19m
- SHA256 e44a6cc38a3255c4b0ee5e4a2e582f0ff8366cd301fb07d69214630899ceecf5
- MD5 56acb73b36ff1525c60bc6fa0e900e0f
- SHA1 fe17ab87cf12a6462f6bd9fd07c194212657a0fa
- SHA512 b2b3d9de8e8dcc94eae4e6400816e221a721c89e254c0f9673ec0c91c3e017f50a37fb58883c0f9f572be47666f0781b0288c4f2ca490adc62b9b73f86e04440
- SSDEEP 24576:iqOaRaaiTnMu3mnXoZ643mnXoZ6i6cMJliLKhSaagqOaRaaiTnMf:+3k03kHRJ4
- TLSH T11245AE13EB9404E5E10A8170A6E64627EB75BD561760D3DF2368C2152F72BC0BF3E3A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_56acb73b36ff1525c60bc6fa0e900e0f_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_56acb73b36ff1525c60bc6fa0e900e0f_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_56acb73b36ff1525c60bc6fa0e900e0f_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
- Size 1.1MB
- SHA256 e44a6cc38a3255c4b0ee5e4a2e582f0ff8366cd301fb07d69214630899ceecf5
- MD5 56acb73b36ff1525c60bc6fa0e900e0f
- SHA1 fe17ab87cf12a6462f6bd9fd07c194212657a0fa
- SHA512 b2b3d9de8e8dcc94eae4e6400816e221a721c89e254c0f9673ec0c91c3e017f50a37fb58883c0f9f572be47666f0781b0288c4f2ca490adc62b9b73f86e04440
- SSDEEP 24576:iqOaRaaiTnMu3mnXoZ643mnXoZ6i6cMJliLKhSaagqOaRaaiTnMf:+3k03kHRJ4
- TLSH T11245AE13EB9404E5E10A8170A6E64627EB75BD561760D3DF2368C2152F72BC0BF3E3A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.