2026-07-06_8b55da3041395f71e6efc3490ca0ef9f_amadey_elex_hijackloader_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_8b55da3041395f71e6efc3490ca0ef9f_amadey_elex_hijackloader_wannacry
Size 62.2MB
Sample260707-cwwfraf121
SHA256 8ed73b4ec11c77d97de579fc24b704f7cdb8076efd3815b8ef64d7b8812789bb
MD5 8b55da3041395f71e6efc3490ca0ef9f
SHA1 ebf2fc0bd81f82d56e26d1269080519f10ccdd1b
SHA512 0866b3ff780bbe742c81a2336140b531085036cb0d0b1f22930bc504580729fdcdbc7ad2065f28bb41320fdba037f1f9ac2c5cf8c0021bf32f91f8a97e2a5ff6
SSDEEP 1572864:/fPREvAHohPwXBzqMLiougGE/JrFINYTkGY+8Um7wU:/fJ1Ho6BqvTERhIOTkdWU
TLSH
T120E7334598CC1FB3D1C952B39B88D2F97AF3762BCE59457B828E48BD7B9B2A0C11510C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-07-06_8b55da3041395f71e6efc3490ca0ef9f_amadey_elex_hijackloader_wannacry

.exe 62.2MB

2026-07-06_8b55da3041395f71e6efc3490ca0ef9f_amadey_elex_hijackloader_wannacry

IMPHASH 340b26a6ac96e1f65d062cee2842c6ed
SHA256 8ed73b4ec11c77d97de579fc24b704f7cdb8076efd3815b8ef64d7b8812789bb
MD5 8b55da3041395f71e6efc3490ca0ef9f
SHA1 ebf2fc0bd81f82d56e26d1269080519f10ccdd1b
SHA512 0866b3ff780bbe742c81a2336140b531085036cb0d0b1f22930bc504580729fdcdbc7ad2065f28bb41320fdba037f1f9ac2c5cf8c0021bf32f91f8a97e2a5ff6
SSDEEP 1572864:/fPREvAHohPwXBzqMLiougGE/JrFINYTkGY+8Um7wU:/fJ1Ho6BqvTERhIOTkdWU
TLSH
T120E7334598CC1FB3D1C952B39B88D2F97AF3762BCE59457B828E48BD7B9B2A0C11510C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

41:ce:3f:33:4e:40:0d:ff:b9:f4:c9:7f:85:ee:39:d0:cc:d0:81:42:9b:c4:d8:68:39:c2:3e:d0:68:2f:93:f4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Wagnardsoft,O=Wagnardsoft,ST=Quebec,C=CA

Chains

Jul 27, 2024

CN=Wagnardsoft,O=Wagnardsoft,ST=Quebec,C=CA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=Wagnardsoft,O=Wagnardsoft,ST=Quebec,C=CA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Wagnardsoft,O=Wagnardsoft,ST=Quebec,C=CA

Serial Number

c8:e7:c3:58:e7:e9:fb:3c:16:ef:34:da:62:c7:d0:af

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 16, 2023 - Jun 15, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

166412

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysAllocStringLen SysAllocString VariantClear SysFreeString SysStringLen

ole32

CoUninitialize CoTaskMemFree CoCreateInstance CoInitialize OleInitialize

user32

CheckDlgButton IsDlgButtonChecked EndDialog SetDlgItemTextW GetFocus SetFocus GetKeyState InvalidateRect SetWindowTextW EnableWindow PostMessageW MessageBoxW DialogBoxParamW SetWindowLongW GetWindowLongW SetTimer GetParent ShowWindow MoveWindow ScreenToClient GetDlgItem GetWindowRect MapDialogRect MonitorFromWindow GetMonitorInfoA SystemParametersInfoW GetWindowTextLengthW GetWindowTextW SendMessageW LoadStringW SetClipboardData EmptyClipboard CloseClipboard OpenClipboard CharUpperW LoadIconW SetCursor LoadCursorW KillTimer

shell32

SHBrowseForFolderW SHGetFileInfoW SHGetPathFromIDListW

msvcrt

free wcsstr wcscmp strlen _beginthreadex _except_handler3 ??1type_info@@UAE@XZ ?terminate@@YAXXZ __dllonexit _onexit _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp memcpy memmove memset _purecall memcmp _CxxThrowException __CxxFrameHandler malloc

kernel32

GetStartupInfoA InitializeCriticalSection ReleaseSemaphore CreateSemaphoreW ResetEvent SetEvent CreateEventW WaitForSingleObject GetVersion IsProcessorFeaturePresent VirtualFree VirtualAlloc SetPriorityClass WaitForMultipleObjects DeleteCriticalSection Sleep EnterCriticalSection LeaveCriticalSection GetStdHandle GlobalMemoryStatus GetSystemInfo GetCurrentProcess GetProcessAffinityMask FileTimeToLocalFileTime FileTimeToSystemTime CompareFileTime GlobalFree GlobalAlloc SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetLogicalDriveStringsW GetFileInformationByHandle GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindClose GetTickCount GetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW GetModuleHandleW MoveFileW RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime CloseHandle GetSystemDirectoryW FormatMessageW LocalFree GetModuleFileNameW LoadLibraryExW GlobalLock GlobalUnlock MultiByteToWideChar GetLastError LoadLibraryW GetProcAddress FreeLibrary GetCommandLineW GetVersionExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_8b55da3041395f71e6efc3490ca0ef9f_amadey_elex_hijackloader_wannacry

oleaut32

ole32

user32

shell32

msvcrt

kernel32

generic