General
- Target 2026-07-06_7dc8ebe39b348d194bcb7932579210e0_amadey_fabookie_glassworm_hijackloader_mespinoza_wannacry
- Size 877KB
- Sample260707-c8dfpsdv3p
- SHA256 dffeb80163f87423c396610d857fe216ea7a27c6832dcae7e74742913488c065
- MD5 7dc8ebe39b348d194bcb7932579210e0
- SHA1 65ca1bd86f8db5a93066b9bdbdfc026a01cfc2ee
- SHA512 30d472e97ce36c6dd2e17f491c9f9c70eedd9e611a93d15cf4db137ccf624679362cc9213e9a5b74178aaebd20a2df04bae3a81c3d3c987d531baf1eea142a1a
- SSDEEP 24576:ysVXplE6Ehg7mM+M6RkMkIM7gE6Eh67AaYU:nVZP0g7mM+M6RkMkIM7I067T
- TLSH T10A156B43E3C0A891D46956304A6A9730E732FC2D5814471F26BCBF5E2E357B2793DE2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_7dc8ebe39b348d194bcb7932579210e0_amadey_fabookie_glassworm_hijackloader_mespinoza_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_7dc8ebe39b348d194bcb7932579210e0_amadey_fabookie_glassworm_hijackloader_mespinoza_wannacry.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_7dc8ebe39b348d194bcb7932579210e0_amadey_fabookie_glassworm_hijackloader_mespinoza_wannacry
- Size 877KB
- SHA256 dffeb80163f87423c396610d857fe216ea7a27c6832dcae7e74742913488c065
- MD5 7dc8ebe39b348d194bcb7932579210e0
- SHA1 65ca1bd86f8db5a93066b9bdbdfc026a01cfc2ee
- SHA512 30d472e97ce36c6dd2e17f491c9f9c70eedd9e611a93d15cf4db137ccf624679362cc9213e9a5b74178aaebd20a2df04bae3a81c3d3c987d531baf1eea142a1a
- SSDEEP 24576:ysVXplE6Ehg7mM+M6RkMkIM7gE6Eh67AaYU:nVZP0g7mM+M6RkMkIM7I067T
- TLSH T10A156B43E3C0A891D46956304A6A9730E732FC2D5814471F26BCBF5E2E357B2793DE2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.