General
- Target 2026-07-09_0da9f8ca72c4684f58a65e5938bb5dad_amadey_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_wannacry_xworm
- Size 392KB
- Sample260709-wrb14aft6k
- SHA256 0382ee3a86e13187208d99d64be71c4a2c7fdb991723d7c60f34bfd89b55418d
- MD5 0da9f8ca72c4684f58a65e5938bb5dad
- SHA1 6d1dff2b8e43340a95464a85e7e37c082b9a1375
- SHA512 6e36451e58bf40598f4587ce4bffd5f72c651a7d3dd3a7ba78edcfca146169d784697a2a2f260a2270ace39bb62e6be1345e02dccab540567d7a9371b6b5dae4
- SSDEEP 6144:p+GYnA0zeWsDi5eJziQ8kV3f+RysMFZzN/z/msHOtb6ih8sXrwEVC9:pYyDi5eNiQ7uysMFZzN/z/msuF37G
- TLSH T142848C06F79408FDE5A7C57489A645469A397C8B0B71EEDF17C8462A2F337E08E39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-09_0da9f8ca72c4684f58a65e5938bb5dad_amadey_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_wannacry_xworm.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_0da9f8ca72c4684f58a65e5938bb5dad_amadey_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_wannacry_xworm.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_0da9f8ca72c4684f58a65e5938bb5dad_amadey_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_wannacry_xworm
- Size 392KB
- SHA256 0382ee3a86e13187208d99d64be71c4a2c7fdb991723d7c60f34bfd89b55418d
- MD5 0da9f8ca72c4684f58a65e5938bb5dad
- SHA1 6d1dff2b8e43340a95464a85e7e37c082b9a1375
- SHA512 6e36451e58bf40598f4587ce4bffd5f72c651a7d3dd3a7ba78edcfca146169d784697a2a2f260a2270ace39bb62e6be1345e02dccab540567d7a9371b6b5dae4
- SSDEEP 6144:p+GYnA0zeWsDi5eJziQ8kV3f+RysMFZzN/z/msHOtb6ih8sXrwEVC9:pYyDi5eNiQ7uysMFZzN/z/msuF37G
- TLSH T142848C06F79408FDE5A7C57489A645469A397C8B0B71EEDF17C8462A2F337E08E39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association