General
- Target 2026-07-17_73cb078d88080aa089495bca5a631829_amadey_elex_glassworm_hijackloader_rugmi_smoke-loader_vidar_wannacry
- Size 10.9MB
- Sample260717-2dxcrsfx8p
- SHA256 f8f4bece6045c783dc476d0cf976ab82ce6c66f27431d88a0a39341a568e4510
- MD5 73cb078d88080aa089495bca5a631829
- SHA1 47eecda9601a8f65d464978545f7db0ea2d42272
- SHA512 e4e46a0150e6b4c8e8b0d6ca66bce7172b3ce918eb80ba47da30c0f0a419f6a5889fd61c63d22ba313b1b469abe16ab7b259a3417a472e102d7cecd72f52bd09
- SSDEEP 196608:P6VdRDnuBotjJh2emr8L/YIsG7MOgqHG64V6RGnTfh:y7RDOotj+eBLJ7XF1+p
- TLSH T102C6E116B3E44522E17B923EC0B25A79E771742A9B32C6CF7104B5AE1DA77C28537323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_73cb078d88080aa089495bca5a631829_amadey_elex_glassworm_hijackloader_rugmi_smoke-loader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_73cb078d88080aa089495bca5a631829_amadey_elex_glassworm_hijackloader_rugmi_smoke-loader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_73cb078d88080aa089495bca5a631829_amadey_elex_glassworm_hijackloader_rugmi_smoke-loader_vidar_wannacry
- Size 10.9MB
- SHA256 f8f4bece6045c783dc476d0cf976ab82ce6c66f27431d88a0a39341a568e4510
- MD5 73cb078d88080aa089495bca5a631829
- SHA1 47eecda9601a8f65d464978545f7db0ea2d42272
- SHA512 e4e46a0150e6b4c8e8b0d6ca66bce7172b3ce918eb80ba47da30c0f0a419f6a5889fd61c63d22ba313b1b469abe16ab7b259a3417a472e102d7cecd72f52bd09
- SSDEEP 196608:P6VdRDnuBotjJh2emr8L/YIsG7MOgqHG64V6RGnTfh:y7RDOotj+eBLJ7XF1+p
- TLSH T102C6E116B3E44522E17B923EC0B25A79E771742A9B32C6CF7104B5AE1DA77C28537323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory