7bf2e089fe845bf33b1288e0008854bde6c2c7222874a42fcda2c51621e30ca5

General

Target
2026-07-09_3ce2564f5be1f8ffdae4b0c3aa824089_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry
Size 1.6MB
Sample260709-p5775aay6m
SHA256 7bf2e089fe845bf33b1288e0008854bde6c2c7222874a42fcda2c51621e30ca5
MD5 3ce2564f5be1f8ffdae4b0c3aa824089
SHA1 45dc5d5beb7d15b7286f337c33f421d26282f1a4
SHA512 86b369cf69e3184d602adf16114d29e2e483e81efb5a098c1c6e9883c120d1227644b4e87d89707c408a9be47fdf4c050bd10cc7621fead73e2dff9527e71a7d
SSDEEP 24576:A3mnXoZ643mnXoZ6i6cMJliLKhSaagqOaRapbMYTqMi8CtBd2QHCHmTBW5LZu7F:A3k03kHRJ7qJtb2Id
TLSH
T1D4756C16F6A442B5D067C079C9D69A56FA313C821B308ADF1349F7292F337D1EA3A721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-07-09_3ce2564f5be1f8ffdae4b0c3aa824089_amadey_cobalt-strike_elex_hijackloader_vidar_wannacry
- Size 1.6MB
- SHA256 7bf2e089fe845bf33b1288e0008854bde6c2c7222874a42fcda2c51621e30ca5
- MD5 3ce2564f5be1f8ffdae4b0c3aa824089
- SHA1 45dc5d5beb7d15b7286f337c33f421d26282f1a4
- SHA512 86b369cf69e3184d602adf16114d29e2e483e81efb5a098c1c6e9883c120d1227644b4e87d89707c408a9be47fdf4c050bd10cc7621fead73e2dff9527e71a7d
- SSDEEP 24576:A3mnXoZ643mnXoZ6i6cMJliLKhSaagqOaRapbMYTqMi8CtBd2QHCHmTBW5LZu7F:A3k03kHRJ7qJtb2Id
- TLSH
  T1D4756C16F6A442B5D067C079C9D69A56FA313C821B308ADF1349F7292F337D1EA3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

aspackv2 discovery persistence spyware stealer adware
- Detects executables packed with ASPack
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
- Drops file in System32 directory
behavioral1 behavioral2