General
- Target 2026-07-08_0843342d843eed1a1fb48c386b900b5e_amadey_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_wannacry
- Size 4.9MB
- Sample260708-nqb1psez9s
- SHA256 9ec52e94537c334e16b74244e64e8dad3d7501bef166c317e4ae523b3e49ecee
- MD5 0843342d843eed1a1fb48c386b900b5e
- SHA1 fe80caafd40990af3744b10bcb05cf90cd64fa5f
- SHA512 9c74d4d475c3acb8b535dc7e0f5f58da6800935b2c2c3f1f38260fd76572fff861c03a9b22c4420ab155c28a7c77ff78689e7e8709544af797dad276965f6e6a
- SSDEEP 98304:r7pXdvUUrItbPmE38fXImE38fXt1u7sPRy:rL9yrmE38fYmE38f9rRy
- TLSH T117368D126613C867D31126B4A1B0E73CD9784FA03D388E93EBF0BC677E72A975B51189
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_0843342d843eed1a1fb48c386b900b5e_amadey_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_wannacry.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_0843342d843eed1a1fb48c386b900b5e_amadey_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_wannacry.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_0843342d843eed1a1fb48c386b900b5e_amadey_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_wannacry
- Size 4.9MB
- SHA256 9ec52e94537c334e16b74244e64e8dad3d7501bef166c317e4ae523b3e49ecee
- MD5 0843342d843eed1a1fb48c386b900b5e
- SHA1 fe80caafd40990af3744b10bcb05cf90cd64fa5f
- SHA512 9c74d4d475c3acb8b535dc7e0f5f58da6800935b2c2c3f1f38260fd76572fff861c03a9b22c4420ab155c28a7c77ff78689e7e8709544af797dad276965f6e6a
- SSDEEP 98304:r7pXdvUUrItbPmE38fXImE38fXt1u7sPRy:rL9yrmE38fYmE38f9rRy
- TLSH T117368D126613C867D31126B4A1B0E73CD9784FA03D388E93EBF0BC677E72A975B51189
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.