General
- Target 2026-06-30_77e9163bc54e707897b3d2a99d4a7082_amadey_elex_glassworm_remcos_wannacry
- Size 1.1MB
- Sample260701-ewty2af17y
- SHA256 7cd63cd2ea53692523b77b23631fa7cca0f9b9a936bc483b8f90bca966db4a90
- MD5 77e9163bc54e707897b3d2a99d4a7082
- SHA1 78c104c549c55477bfbb69ccb533bf5a463ccd02
- SHA512 26a026e51a3db81682325b1b92abc8289f13c6211711e0661816c4945e25b4c33a4e48cbc63ac4a07ec68892a50c18cce35ae6354fa4a525212d1e17716c4f2e
- SSDEEP 24576:3jQVTNjmegy1h+tGZIJK2xqo49AMKZv1EfTe9LdS2R2VbfE:UJ1FBktS+D4mM+efTuLdS2IVs
- TLSH T1D3459D167FF1C032D56302308E6AE769A1F9F9714E214887B7CC165D1F70AC29B39B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_77e9163bc54e707897b3d2a99d4a7082_amadey_elex_glassworm_remcos_wannacry.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_77e9163bc54e707897b3d2a99d4a7082_amadey_elex_glassworm_remcos_wannacry.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_77e9163bc54e707897b3d2a99d4a7082_amadey_elex_glassworm_remcos_wannacry
- Size 1.1MB
- SHA256 7cd63cd2ea53692523b77b23631fa7cca0f9b9a936bc483b8f90bca966db4a90
- MD5 77e9163bc54e707897b3d2a99d4a7082
- SHA1 78c104c549c55477bfbb69ccb533bf5a463ccd02
- SHA512 26a026e51a3db81682325b1b92abc8289f13c6211711e0661816c4945e25b4c33a4e48cbc63ac4a07ec68892a50c18cce35ae6354fa4a525212d1e17716c4f2e
- SSDEEP 24576:3jQVTNjmegy1h+tGZIJK2xqo49AMKZv1EfTe9LdS2R2VbfE:UJ1FBktS+D4mM+efTuLdS2IVs
- TLSH T1D3459D167FF1C032D56302308E6AE769A1F9F9714E214887B7CC165D1F70AC29B39B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.