General
- Target 2026-07-09_0360a1ab5f19cda0d84ccc0f93b15053_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 85KB
- Sample260709-qe24vsbs3q
- SHA256 514db9f9cd8b7f213468b32270a24bc32e723be76909baf3dd8603803122d2ed
- MD5 0360a1ab5f19cda0d84ccc0f93b15053
- SHA1 166720ad55a3d29e91740caca8bdd20906835718
- SHA512 3c7f5e2e9ee36143e61d7ad6153eb419cd6ae487419c3f5f06fd5da2edcdfd79710d020ad5abeabcc13baefc69f7b13e8a561cecc5d7131fca01ff544716f51d
- SSDEEP 1536:YVbkfY7G3PxfV1MfU7jPxTWvVvwfl7PPxzWHqaN6qH:YVbEY6fxfV1cU3xgVvwljx/aNVH
- TLSH T182838F13CEA40CA6F71A4670B4E5064ADDB57E57AAD1C2DF632CC2141F60780B7AA2FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_0360a1ab5f19cda0d84ccc0f93b15053_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_0360a1ab5f19cda0d84ccc0f93b15053_amadey_cobalt-strike_hijackloader_satacom_wannacry.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_0360a1ab5f19cda0d84ccc0f93b15053_amadey_cobalt-strike_hijackloader_satacom_wannacry
- Size 85KB
- SHA256 514db9f9cd8b7f213468b32270a24bc32e723be76909baf3dd8603803122d2ed
- MD5 0360a1ab5f19cda0d84ccc0f93b15053
- SHA1 166720ad55a3d29e91740caca8bdd20906835718
- SHA512 3c7f5e2e9ee36143e61d7ad6153eb419cd6ae487419c3f5f06fd5da2edcdfd79710d020ad5abeabcc13baefc69f7b13e8a561cecc5d7131fca01ff544716f51d
- SSDEEP 1536:YVbkfY7G3PxfV1MfU7jPxTWvVvwfl7PPxzWHqaN6qH:YVbEY6fxfV1cU3xgVvwljx/aNVH
- TLSH T182838F13CEA40CA6F71A4670B4E5064ADDB57E57AAD1C2DF632CC2141F60780B7AA2FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.