General
- Target 2026-07-08_8d8eee4c3b53545198f718f77617483c_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 956KB
- Sample260708-y2tp1ahs81
- SHA256 5413d8d7f874c3020750f3a5f99f3a9b5a9e8f3ccd22babd5f4cdb0240fe8ac7
- MD5 8d8eee4c3b53545198f718f77617483c
- SHA1 23dc5a450c08b93396bb067cc4d3a28bdf5d66be
- SHA512 752cbbedc79906ce90a06f461925e4597c33aaa90f9f102a65c3234a966f08b95e90b613540ece6c0cf9017e664b7d5926c71ca5b58dac1c8d609a3f418edc79
- SSDEEP 24576:rCWyATZe0p4Ek4niOkl/A04szE87JKTvm:7eW4SkZP4sz9Mb
- TLSH T1AD25E956F5788723D0B3C0B9C5D7AA99FD3234465B308ACB024AD36C2E277D68636739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_8d8eee4c3b53545198f718f77617483c_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_8d8eee4c3b53545198f718f77617483c_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_8d8eee4c3b53545198f718f77617483c_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 956KB
- SHA256 5413d8d7f874c3020750f3a5f99f3a9b5a9e8f3ccd22babd5f4cdb0240fe8ac7
- MD5 8d8eee4c3b53545198f718f77617483c
- SHA1 23dc5a450c08b93396bb067cc4d3a28bdf5d66be
- SHA512 752cbbedc79906ce90a06f461925e4597c33aaa90f9f102a65c3234a966f08b95e90b613540ece6c0cf9017e664b7d5926c71ca5b58dac1c8d609a3f418edc79
- SSDEEP 24576:rCWyATZe0p4Ek4niOkl/A04szE87JKTvm:7eW4SkZP4sz9Mb
- TLSH T1AD25E956F5788723D0B3C0B9C5D7AA99FD3234465B308ACB024AD36C2E277D68636739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.