General
- Target 2026-07-02_cef2388fa9a511ae2db24c5029d5bbb4_amadey_cobalt-strike_elex_glassworm_remcos_vidar_wannacry
- Size 4.2MB
- Sample260702-2ejhasfx8y
- SHA256 778821b74bab7f56815ade948e58d7af87786d089c7979440795b1d63800fcbf
- MD5 cef2388fa9a511ae2db24c5029d5bbb4
- SHA1 965a676ebb4d9ff4390d52fcb6e370b9db36ecda
- SHA512 9d73cde1a7211a7cd87e76df7eb286ca2a9ad65ec95802b7fa968ad34dc4a4c06d5fd0f1dc76aa517393459c62e8519632ce87cbf06495707295ddb57009bd17
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatgleW1PszNsQ0ReW4SkZP4sn:7ID41qW1PszV9W1PszSfkZc86
- TLSH T16E167D02F7A58272E0B39175C5A766A6BE7234011F3086CF1388A77D5F33BC19A3576A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_cef2388fa9a511ae2db24c5029d5bbb4_amadey_cobalt-strike_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_cef2388fa9a511ae2db24c5029d5bbb4_amadey_cobalt-strike_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_cef2388fa9a511ae2db24c5029d5bbb4_amadey_cobalt-strike_elex_glassworm_remcos_vidar_wannacry
- Size 4.2MB
- SHA256 778821b74bab7f56815ade948e58d7af87786d089c7979440795b1d63800fcbf
- MD5 cef2388fa9a511ae2db24c5029d5bbb4
- SHA1 965a676ebb4d9ff4390d52fcb6e370b9db36ecda
- SHA512 9d73cde1a7211a7cd87e76df7eb286ca2a9ad65ec95802b7fa968ad34dc4a4c06d5fd0f1dc76aa517393459c62e8519632ce87cbf06495707295ddb57009bd17
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatgleW1PszNsQ0ReW4SkZP4sn:7ID41qW1PszV9W1PszSfkZc86
- TLSH T16E167D02F7A58272E0B39175C5A766A6BE7234011F3086CF1388A77D5F33BC19A3576A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory