General
- Target 2026-04-15_c7bd3ac72bfc46ae0340adf96a3f48a7_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry
- Size 5.3MB
- Sample260415-vtpvashv4x
- SHA256 b8641df2872f49dd3bddbb236fac843daea9ea1db88aafb9844c63728ca5f112
- MD5 c7bd3ac72bfc46ae0340adf96a3f48a7
- SHA1 b6f6c3f1024d6f59fd4749a0a6dabaa61d509c84
- SHA512 95a12c836aae74e19b3ec2d8a99dfe47692091ce76522923c5ced7286127c66ab08350517972d893070cdf74f5056d950fa041407874252545dad38a926eafb2
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatglLsy6i1zuajsauZpY5CwqB:TID41qW1PszVBts5LufkZcPrX
- TLSH T176467B11B3F84E62E1BB5175C5A29695AE337C210F3493CF1294AA6D3E337C09A36763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_c7bd3ac72bfc46ae0340adf96a3f48a7_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_c7bd3ac72bfc46ae0340adf96a3f48a7_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_c7bd3ac72bfc46ae0340adf96a3f48a7_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry
- Size 5.3MB
- SHA256 b8641df2872f49dd3bddbb236fac843daea9ea1db88aafb9844c63728ca5f112
- MD5 c7bd3ac72bfc46ae0340adf96a3f48a7
- SHA1 b6f6c3f1024d6f59fd4749a0a6dabaa61d509c84
- SHA512 95a12c836aae74e19b3ec2d8a99dfe47692091ce76522923c5ced7286127c66ab08350517972d893070cdf74f5056d950fa041407874252545dad38a926eafb2
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatglLsy6i1zuajsauZpY5CwqB:TID41qW1PszVBts5LufkZcPrX
- TLSH T176467B11B3F84E62E1BB5175C5A29695AE337C210F3493CF1294AA6D3E337C09A36763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory