Overview

overview

6

Static

static

5

2026-07-15...ry.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-15_02b649614ef3c7e4077cd75c9d99d2a2_amadey_cobalt-strike_vidar_wannacry
  • Size 925KB
  • Sample260715-gaxtxafw21
  • SHA256 8ccb5807982d223c846e1f38f3e0658bceb5fc6acbfa8cf220a99ac47c8b940a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-07-15_02b649614ef3c7e4077cd75c9d99d2a2_amadey_cobalt-strike_vidar_wannacry
    .exe 925KB

2026-07-15_02b649614ef3c7e4077cd75c9d99d2a2_amadey_cobalt-strike_vidar_wannacry

  • IMPHASH 34ab9ecd1566711ad1baa609e7db9a6b
  • SHA256 8ccb5807982d223c846e1f38f3e0658bceb5fc6acbfa8cf220a99ac47c8b940a
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:10windowsx64arch:x64

  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
a7:3c:72:3d:a8:f8:ef:50:5c:fe:d0:ad:1e:b1:98:7a:a8:7a:48:c4:3b:65:80:ea:55:77:c7:4c:30:3b:d9:3f
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
10
Entry point
127760
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
culauncher.pdb