General
- Target 2026-07-07_5b04bffb7ee043205341c4566a6d2297_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry
- Size 332KB
- Sample260707-wt3xlab18p
- SHA256 c7be0ec96aa2d2bc5723737c0f8b7fc5d0291e8c53590428008d608bbc0fffc7
- MD5 5b04bffb7ee043205341c4566a6d2297
- SHA1 2b8f9d1535cf5a9b5c51c00ddb7402a190d337d7
- SHA512 42059075545c05d0a27be68d218ce3cfd1b57663f0f5c0f873df1a1b214fa015845962cd0d0fc631e879f9cb5a64b7b171fe6229368e37925b6b4ff50267dd36
- SSDEEP 6144:kHnVq5K4lVC9fnLc+D/0vxBzkiLz9u5a7Ra7fabVC9:kHVECvNyPz5L85aRaio
- TLSH T1D0748D03A7A414F5E6674234D8E61A06EB71BC325B60CBDF1364476A1F32380EE7A7B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_5b04bffb7ee043205341c4566a6d2297_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_5b04bffb7ee043205341c4566a6d2297_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_5b04bffb7ee043205341c4566a6d2297_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry
- Size 332KB
- SHA256 c7be0ec96aa2d2bc5723737c0f8b7fc5d0291e8c53590428008d608bbc0fffc7
- MD5 5b04bffb7ee043205341c4566a6d2297
- SHA1 2b8f9d1535cf5a9b5c51c00ddb7402a190d337d7
- SHA512 42059075545c05d0a27be68d218ce3cfd1b57663f0f5c0f873df1a1b214fa015845962cd0d0fc631e879f9cb5a64b7b171fe6229368e37925b6b4ff50267dd36
- SSDEEP 6144:kHnVq5K4lVC9fnLc+D/0vxBzkiLz9u5a7Ra7fabVC9:kHVECvNyPz5L85aRaio
- TLSH T1D0748D03A7A414F5E6674234D8E61A06EB71BC325B60CBDF1364476A1F32380EE7A7B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.