24bb618d1d74610ea3aa9f61b70d6782afca7716251ab9f946dd4771b84a2cb7

General

Target
2026-07-08_d0bdacfd15e0e8450ca1c991e760c800_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry
Size 1.5MB
Sample260708-vbcr1scx3n
SHA256 24bb618d1d74610ea3aa9f61b70d6782afca7716251ab9f946dd4771b84a2cb7
MD5 d0bdacfd15e0e8450ca1c991e760c800
SHA1 2e1a60c4d556fe7043e551f3801b7ec599598c1d
SHA512 fc2da4acf81c4febb70232f0de51bf25e437874406b4f37727bff9b514ba0c972528c09cf7d5d0bde763ff12f10680d8f1f32c4f4e5adce1481c05089180cd1f
SSDEEP 24576:A3mnXoZ643mnXoZ6i6cMJliLabaonGEiFHUMD5Tvinrmh5jcAkSYqyE:A3k03kHRJW56rapYq
TLSH
T166655B16F6644BA5D06BC178C5D29666EA733C461F3087CB1354EE283F23BD19A3A363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-08_d0bdacfd15e0e8450ca1c991e760c800_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry
- Size 1.5MB
- SHA256 24bb618d1d74610ea3aa9f61b70d6782afca7716251ab9f946dd4771b84a2cb7
- MD5 d0bdacfd15e0e8450ca1c991e760c800
- SHA1 2e1a60c4d556fe7043e551f3801b7ec599598c1d
- SHA512 fc2da4acf81c4febb70232f0de51bf25e437874406b4f37727bff9b514ba0c972528c09cf7d5d0bde763ff12f10680d8f1f32c4f4e5adce1481c05089180cd1f
- SSDEEP 24576:A3mnXoZ643mnXoZ6i6cMJliLabaonGEiFHUMD5Tvinrmh5jcAkSYqyE:A3k03kHRJW56rapYq
- TLSH
  T166655B16F6644BA5D06BC178C5D29666EA733C461F3087CB1354EE283F23BD19A3A363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

aspackv2 discovery persistence spyware stealer adware ransomware
- Detects executables packed with ASPack
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
- Drops file in System32 directory
behavioral1 behavioral2