General
- Target 2026-07-09_a76b5600d1cc0c9adbd2da5ea82fe30b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
- Size 544KB
- Sample260709-t9vvtady2m
- SHA256 581ce4d847345615ccc663ca3660f03357f4e22a329b45a3be21a19eb9df7bd8
- MD5 a76b5600d1cc0c9adbd2da5ea82fe30b
- SHA1 a29d9f106f6b148bee21072e283602acea242e16
- SHA512 ab118c0abf811d5c4577e925811d6d8d2271a1d9d6b343031c216da8b2318e45498da2dbe18713c41070f1cacf3377debad435d97f34a691005dc3408be9b645
- SSDEEP 6144:h4rWTSIoXNHnr1GJOl4uvjgddF1iOWTSIoXNHnr1GJOl4uvjgddFfIJVC9T45VCO:arWcRGJlF8OWcRGJlFgus+gqE0+0NaJf
- TLSH T14BC4AF07B6A804E9E26B8634D4E24A06EB767D575760C7CF1368821A0F737C0EF793A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_a76b5600d1cc0c9adbd2da5ea82fe30b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_a76b5600d1cc0c9adbd2da5ea82fe30b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_a76b5600d1cc0c9adbd2da5ea82fe30b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
- Size 544KB
- SHA256 581ce4d847345615ccc663ca3660f03357f4e22a329b45a3be21a19eb9df7bd8
- MD5 a76b5600d1cc0c9adbd2da5ea82fe30b
- SHA1 a29d9f106f6b148bee21072e283602acea242e16
- SHA512 ab118c0abf811d5c4577e925811d6d8d2271a1d9d6b343031c216da8b2318e45498da2dbe18713c41070f1cacf3377debad435d97f34a691005dc3408be9b645
- SSDEEP 6144:h4rWTSIoXNHnr1GJOl4uvjgddF1iOWTSIoXNHnr1GJOl4uvjgddFfIJVC9T45VCO:arWcRGJlF8OWcRGJlFgus+gqE0+0NaJf
- TLSH T14BC4AF07B6A804E9E26B8634D4E24A06EB767D575760C7CF1368821A0F737C0EF793A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.