2026-08-19_486d7dd73d525e7f0bf6224df5b34abd_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-19_486d7dd73d525e7f0bf6224df5b34abd_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry
Size 4.0MB
Sample260819-ntxftataka
SHA256 8ad3f2e4f6a508c8da35cd24725e9a9a76ce0924783ab625e379548a45433717
MD5 486d7dd73d525e7f0bf6224df5b34abd
SHA1 692c82b24c0dc7aec1cfd2299ecced707e66c0de
SHA512 90ec7daefeb2a9e594b5b5daa397918ebb1377f7b05ff94b51546a889d05765b7f2eb9de24257ea97090664dfc89363a546eabb9bc7102fcabccdd0553a40235
SSDEEP 49152:uRJcqJtb2IseW4SkZP4sz9MbkqJtb2IEeW4SkZP4sz9MbOpYq:uRu/fkZckFfkZcO6
TLSH
T19A160A15F5788322D0B3C0B9C5D6AA9AFD3238465B308ACB024AE76C2E377D6D536735
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_486d7dd73d525e7f0bf6224df5b34abd_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry

File Explorer

2026-08-19_486d7dd73d525e7f0bf6224df5b34abd_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry

.exe 4.0MB

2026-08-19_486d7dd73d525e7f0bf6224df5b34abd_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry

SHA256 8ad3f2e4f6a508c8da35cd24725e9a9a76ce0924783ab625e379548a45433717
MD5 486d7dd73d525e7f0bf6224df5b34abd
SHA1 692c82b24c0dc7aec1cfd2299ecced707e66c0de
SHA512 90ec7daefeb2a9e594b5b5daa397918ebb1377f7b05ff94b51546a889d05765b7f2eb9de24257ea97090664dfc89363a546eabb9bc7102fcabccdd0553a40235
SSDEEP 49152:uRJcqJtb2IseW4SkZP4sz9MbkqJtb2IEeW4SkZP4sz9MbOpYq:uRu/fkZckFfkZcO6
TLSH
T19A160A15F5788322D0B3C0B9C5D6AA9AFD3238465B308ACB024AE76C2E377D6D536735
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

182304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

314KB

Virtual Size

313KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

54KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.freestd

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

17B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

250KB

Virtual Size

249KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_486d7dd73d525e7f0bf6224df5b34abd_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry

generic