2026-08-10_81d86219597af82e3d5af0568b021d18_amadey_cobalt-strike_conti_elex_hijackloader_wannacry

General

Target
2026-08-10_81d86219597af82e3d5af0568b021d18_amadey_cobalt-strike_conti_elex_hijackloader_wannacry
Size 655KB
Sample260810-15979svvbz
SHA256 9c1bee52b6b36f069b1c4998e922fce3f7f9df5a2c52ed2c0c3a6e7d02e3a3b9
MD5 81d86219597af82e3d5af0568b021d18
SHA1 fa8de43884ee6ab6ea76348967a931cf34dd2777
SHA512 7969f0056d010c648094d4c21f94c879d7db2cddcbd2197d33ea395285abbabb4734c520c3363eb8c8c714d4e38a24ab0608d825b81b1fa9c24c613a18848e36
SSDEEP 6144:WJZ+au/72wopCfTXkxqD6EbR7OjwYF+J5nyGcT93PiY+Fa7BdvF94cxHnQVC9faf:uE/72wcCvRR5AaY+FUBmYH/if
TLSH
T1E2E46C33BA944976D552113048FC9B6BE939F90E1B6042CF637C8F191E60BF13A3D66A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

aspackv2

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_81d86219597af82e3d5af0568b021d18_amadey_cobalt-strike_conti_elex_hijackloader_wannacry

2026-08-10_81d86219597af82e3d5af0568b021d18_amadey_cobalt-strike_conti_elex_hijackloader_wannacry

.exe 655KB

SHA256 9c1bee52b6b36f069b1c4998e922fce3f7f9df5a2c52ed2c0c3a6e7d02e3a3b9
MD5 81d86219597af82e3d5af0568b021d18
SHA1 fa8de43884ee6ab6ea76348967a931cf34dd2777
SHA512 7969f0056d010c648094d4c21f94c879d7db2cddcbd2197d33ea395285abbabb4734c520c3363eb8c8c714d4e38a24ab0608d825b81b1fa9c24c613a18848e36
SSDEEP 6144:WJZ+au/72wopCfTXkxqD6EbR7OjwYF+J5nyGcT93PiY+Fa7BdvF94cxHnQVC9faf:uE/72wcCvRR5AaY+FUBmYH/if
TLSH
T1E2E46C33BA944976D552113048FC9B6BE939F90E1B6042CF637C8F191E60BF13A3D66A
MD5 SHA1 SHA512 SSDEEP TLSH

Detects executables packed with ASPack
ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

36865

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths