General
- Target 2026-06-02_bfcb9debb7283e365ce73c1720feafa8_amadey_elex_glassworm_hijackloader_ipamor_rhadamanthys_wannacry
- Size 2.5MB
- Sample260602-tmvarshz9w
- SHA256 69200c05297ad1cbd4c7c92b8d5311f2c4a5d2396d348f74109fa7a46a37c339
- MD5 bfcb9debb7283e365ce73c1720feafa8
- SHA1 f3c5f4ee0a678bbc27820709abc9bc9069391b8e
- SHA512 a22a022eaa5c9f1c9e36c9470057e5e1ec90c0b41a2b6bacf6f83a91f5f07758ae853b273c2c12e735418beb20acafdfced466121847fd8a6b4b22b03beb063f
- SSDEEP 24576:M51xQbH3S9tsgX8zOXJvwEC8UJhHxHuZBjk38WuBcAbwoA/BkjSHXP36RMGdt:MtQT3S9tsgX8zEC8ULgCSA/Bkj0A
- TLSH T170C5181633E84927F1AE673F9070093D53A9AA3FDE77C74E7814B89E94A57028907723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-06-02_bfcb9debb7283e365ce73c1720feafa8_amadey_elex_glassworm_hijackloader_ipamor_rhadamanthys_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_bfcb9debb7283e365ce73c1720feafa8_amadey_elex_glassworm_hijackloader_ipamor_rhadamanthys_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_bfcb9debb7283e365ce73c1720feafa8_amadey_elex_glassworm_hijackloader_ipamor_rhadamanthys_wannacry
- Size 2.5MB
- SHA256 69200c05297ad1cbd4c7c92b8d5311f2c4a5d2396d348f74109fa7a46a37c339
- MD5 bfcb9debb7283e365ce73c1720feafa8
- SHA1 f3c5f4ee0a678bbc27820709abc9bc9069391b8e
- SHA512 a22a022eaa5c9f1c9e36c9470057e5e1ec90c0b41a2b6bacf6f83a91f5f07758ae853b273c2c12e735418beb20acafdfced466121847fd8a6b4b22b03beb063f
- SSDEEP 24576:M51xQbH3S9tsgX8zOXJvwEC8UJhHxHuZBjk38WuBcAbwoA/BkjSHXP36RMGdt:MtQT3S9tsgX8zEC8ULgCSA/Bkj0A
- TLSH T170C5181633E84927F1AE673F9070093D53A9AA3FDE77C74E7814B89E94A57028907723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application