2026-07-17_8afb748ffabc0f41e2acee0553d735fe_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry

General

Target
2026-07-17_8afb748ffabc0f41e2acee0553d735fe_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
Size 803KB
Sample260718-dh2laad18n
SHA256 cb640a2f7db403a00267bef65aceb376991661315439e40c33a0586fe17e4b50
MD5 8afb748ffabc0f41e2acee0553d735fe
SHA1 4521bd1c1e6f4f3f64e2fe3aae5350695c3f1286
SHA512 e5136a94405b14d9e314975b29f95aa3ae41b4a2e5776a6d6877e3905fc93f1e1befbd1a973273e92492144833a9ec8369b6388f44959e804cf4668b1df17d02
SSDEEP 12288:PCvRR5FTjkWIw2RBKwZC2tDcljjKFPlpKaif:PCv7rTiw2RYwZCUsjKplpKaif
TLSH
T18D05291766EC0895E462613489E94606EBB2F8555B31C3CF12788B2D1F63BF0BD3CB69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-17_8afb748ffabc0f41e2acee0553d735fe_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry

2026-07-17_8afb748ffabc0f41e2acee0553d735fe_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry

.exe 803KB

IMPHASH 3325e12181a2525dc192101472612d6a
SHA256 cb640a2f7db403a00267bef65aceb376991661315439e40c33a0586fe17e4b50
MD5 8afb748ffabc0f41e2acee0553d735fe
SHA1 4521bd1c1e6f4f3f64e2fe3aae5350695c3f1286
SHA512 e5136a94405b14d9e314975b29f95aa3ae41b4a2e5776a6d6877e3905fc93f1e1befbd1a973273e92492144833a9ec8369b6388f44959e804cf4668b1df17d02
SSDEEP 12288:PCvRR5FTjkWIw2RBKwZC2tDcljjKFPlpKaif:PCv7rTiw2RYwZCUsjKplpKaif
TLSH
T18D05291766EC0895E462613489E94606EBB2F8555B31C3CF12788B2D1F63BF0BD3CB69
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

2

Major OS version

5

Entry point

10852

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

F:\CB\11X_MainQ\BuildResults\bin\Release\chrome_wow_helper.pdb