089cabad25fdd0bd4b124cc646ea25276e42e21601d9bfacb385198279955859

Analysis

max time kernel
149s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/04/2026, 17:15

Target
2026-04-23_62a7f310268743876361b2d3be59fb6e_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Size 849KB
Sample260423-vsqefaa17r
SHA256 089cabad25fdd0bd4b124cc646ea25276e42e21601d9bfacb385198279955859
MD5 62a7f310268743876361b2d3be59fb6e
SHA1 c223555f629571faaf31afa09460f0033a7012d3
SHA512 cd6f9909b4db99ff946d242a5793278f5396e7624bfd72bbb9e6bb141ef08a4c5e8b65320482627978aeb0329896211a0b06f8ebf65d85faa0e652e519ff4ccd
SSDEEP 12288:snEy6xMGNTCWsTGQ4/mEMbZa9NGcjbvZb5NqSQwq/Vta8+ChTOI+T:snt6xDxmB9aqcvhbpQhVMChTo
TLSH
T1D5055C57EAA4A9E1C6BA4434CD61C711E732BDA40F1087DF6264F36E4E336D0AE39B11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3728	3352	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-04-23_62a7f310268743876361b2d3be59fb6e_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-23_62a7f310268743876361b2d3be59fb6e_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe"
1⤵
PID:3352
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3352 -s 8
  2⤵
  - Program crash
  PID:3728

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3352 -ip 3352
1⤵
PID:2768