General
- Target 2026-07-08_27b54f7f9ad067a5010a4f2effad7700_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 161KB
- Sample260708-zpp2qag12j
- SHA256 a62a7f48649d730bfb75d5ef5274861675d6412aba4a4b7ebf02b12f15ab8905
- MD5 27b54f7f9ad067a5010a4f2effad7700
- SHA1 8c04ca5940e9103b9a2d9f8a7426a269fdddd190
- SHA512 9578e087ea2e9f17da6d9d8f723fc7e4682f5a79c12dfb9e4fe71245e1f63a0be2d491debf212b13de05d3ac116dc4c2f36a78d22f3e6dc7e3fe01cb19ce5d3e
- SSDEEP 3072:YVbEY6fxzaNVHi17gtWxHVGis4x/aNVHWV16dYxGVbEY6fxxomCP1:Q43a7W8CxDa7CAl4lVC9
- TLSH T174F37D13CEA408A2FB5A4630B4E906569DB5BE536AD1C6CF632C92041F70780F7963FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_27b54f7f9ad067a5010a4f2effad7700_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_27b54f7f9ad067a5010a4f2effad7700_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_27b54f7f9ad067a5010a4f2effad7700_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 161KB
- SHA256 a62a7f48649d730bfb75d5ef5274861675d6412aba4a4b7ebf02b12f15ab8905
- MD5 27b54f7f9ad067a5010a4f2effad7700
- SHA1 8c04ca5940e9103b9a2d9f8a7426a269fdddd190
- SHA512 9578e087ea2e9f17da6d9d8f723fc7e4682f5a79c12dfb9e4fe71245e1f63a0be2d491debf212b13de05d3ac116dc4c2f36a78d22f3e6dc7e3fe01cb19ce5d3e
- SSDEEP 3072:YVbEY6fxzaNVHi17gtWxHVGis4x/aNVHWV16dYxGVbEY6fxxomCP1:Q43a7W8CxDa7CAl4lVC9
- TLSH T174F37D13CEA408A2FB5A4630B4E906569DB5BE536AD1C6CF632C92041F70780F7963FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.