2026-08-04_7caedf93bccba75756e99f2b372a7f06_amadey_cobalt-strike_conti_elex_hijackloader_wannacry

General

Target
2026-08-04_7caedf93bccba75756e99f2b372a7f06_amadey_cobalt-strike_conti_elex_hijackloader_wannacry
Size 757KB
Sample260804-ya273afg76
SHA256 6c12d32d5d67158e20f0aeb0804086be8f532edc895119cfe67450e9eafb7778
MD5 7caedf93bccba75756e99f2b372a7f06
SHA1 12452498e19e782e9a64ea96a23ef56f2432278f
SHA512 f0a79ceda59d48798f55e09c7e0e4cf56bd9cea9d283ebbd029be9de3cbf38c9f9cce56d7a258a06ffea13d700cf6c637427be3ea92662122611d23e77604de9
SSDEEP 12288:cP5V5KV5izrqFkbGE/F5V5KV5izrqFkbQX6IjUl54G2nC79lSj2f0D:KIifqFu1//IifqFuyDA54GX79lSj2f+
TLSH
T17DF48E07F6E244FCD557C13089E69372EA71FC225620AB7F2768E6212F20F906F2A755
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_7caedf93bccba75756e99f2b372a7f06_amadey_cobalt-strike_conti_elex_hijackloader_wannacry

2026-08-04_7caedf93bccba75756e99f2b372a7f06_amadey_cobalt-strike_conti_elex_hijackloader_wannacry

.exe 757KB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 6c12d32d5d67158e20f0aeb0804086be8f532edc895119cfe67450e9eafb7778
MD5 7caedf93bccba75756e99f2b372a7f06
SHA1 12452498e19e782e9a64ea96a23ef56f2432278f
SHA512 f0a79ceda59d48798f55e09c7e0e4cf56bd9cea9d283ebbd029be9de3cbf38c9f9cce56d7a258a06ffea13d700cf6c637427be3ea92662122611d23e77604de9
SSDEEP 12288:cP5V5KV5izrqFkbGE/F5V5KV5izrqFkbQX6IjUl54G2nC79lSj2f0D:KIifqFu1//IifqFuyDA54GX79lSj2f+
TLSH
T17DF48E07F6E244FCD557C13089E69372EA71FC225620AB7F2768E6212F20F906F2A755
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths