Analysis
- max time kernel
149s - max time network
97s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
31/05/2026, 19:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-31_871d3633eacbf5112e25369c8420f5f0_amadey_elex_emotet_glassworm_maze_rhadamanthys_smoke-loader_stop_vidar_wannacry.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_871d3633eacbf5112e25369c8420f5f0_amadey_elex_emotet_glassworm_maze_rhadamanthys_smoke-loader_stop_vidar_wannacry.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target 2026-05-31_871d3633eacbf5112e25369c8420f5f0_amadey_elex_emotet_glassworm_maze_rhadamanthys_smoke-loader_stop_vidar_wannacry.exe
- Size 1.3MB
- Sample260531-yps8psfs7x
- SHA256 8905e7fcdbd6abd92fba793c5aac7c90086216abb67d27fb3d3572723c073827
- MD5 871d3633eacbf5112e25369c8420f5f0
- SHA1 333ed34e7c9a8685f5def6e09561bea696dd5cad
- SHA512 47061c938eff517707a8e56006803fe3430f4d764b9547c8eb734d2c8fbec7a0a8f71dee4df88551a6d9f02c1daf03ad8274a5c433ea4357d18be11f93569004
- SSDEEP 24576:05v3H67p4x4rH54GXtA5Hqkxqatgl8blpapUrEZ3G7+:8H676x4DHtwqatgloUpmEZR
- TLSH T18B555B42B7E584B2F1B706325DB686A16B76BC615F31D30F2390672D9E32B809F31762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4788 6116 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-31_871d3633eacbf5112e25369c8420f5f0_amadey_elex_emotet_glassworm_maze_rhadamanthys_smoke-loader_stop_vidar_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-31_871d3633eacbf5112e25369c8420f5f0_amadey_elex_emotet_glassworm_maze_rhadamanthys_smoke-loader_stop_vidar_wannacry.exe"1⤵PID:6116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6116 -s 2362⤵
- Program crash
PID:4788
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 6116 -ip 61161⤵PID:1144