General
- Target 2026-07-06_fcd581b89e83a688f119aa601e6bee86_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
- Size 2.7MB
- Sample260706-3q5eksav9q
- SHA256 1e7ba134f87c31fdd53aab9f7ee4769d740bf058efb0e370c1abee2ad81c7d2a
- MD5 fcd581b89e83a688f119aa601e6bee86
- SHA1 73a9cdc813a456f23647dce9473b524db37119cb
- SHA512 b1d6e7ceb9ac71f2cccd9b4ef4abf2c9db7ecfb99ed3ffe111deb6623a294d99cf1b37d516e3d50c1ad4ae1958a3fc015a32f6e86b9bde8f8a8aa36da15b7c3e
- SSDEEP 49152:EqJtb2IdqJtb2IdqJtb2Ij56rIeW4SkZP4sz9Mb:EccJr0fkZc
- TLSH T164D5F925F5788732D077D0B9C5D2AA9AFE3238465F308ACB0246D76C2E276D6C536732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_fcd581b89e83a688f119aa601e6bee86_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_fcd581b89e83a688f119aa601e6bee86_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_fcd581b89e83a688f119aa601e6bee86_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
- Size 2.7MB
- SHA256 1e7ba134f87c31fdd53aab9f7ee4769d740bf058efb0e370c1abee2ad81c7d2a
- MD5 fcd581b89e83a688f119aa601e6bee86
- SHA1 73a9cdc813a456f23647dce9473b524db37119cb
- SHA512 b1d6e7ceb9ac71f2cccd9b4ef4abf2c9db7ecfb99ed3ffe111deb6623a294d99cf1b37d516e3d50c1ad4ae1958a3fc015a32f6e86b9bde8f8a8aa36da15b7c3e
- SSDEEP 49152:EqJtb2IdqJtb2IdqJtb2Ij56rIeW4SkZP4sz9Mb:EccJr0fkZc
- TLSH T164D5F925F5788732D077D0B9C5D2AA9AFE3238465F308ACB0246D76C2E276D6C536732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.