General
- Target 2026-07-17_850067d67296110ff0b440941ea2566b_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry
- Size 5.3MB
- Sample260717-jplrasas6w
- SHA256 0e622d5dc72e23f5790fb75055685d3a45b0113c95879eb07fe6107d759c9f14
- MD5 850067d67296110ff0b440941ea2566b
- SHA1 9fdbd446118597f32005dcd55c49098da45ef608
- SHA512 12324fe687a4809ff74f921e02cec408b2779ef3d3d4b4618bd38f5ba6571854cf3bb7b43cc42d8090679c4a33cf542446c69e443a85067086146d099af094f7
- SSDEEP 98304:njBxcO4EYJUe5itqbGImCf2dYjBxcO4EYJUe5itqbGImCf2dI:njBxcO4ZEtqCIjAYjBxcO4ZEtqCIjAI
- TLSH T137469C56F2A484F6D42780B9C5EA9B7AF6717C144B2043CB6780EB5E1F33BE19839316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_850067d67296110ff0b440941ea2566b_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_850067d67296110ff0b440941ea2566b_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_850067d67296110ff0b440941ea2566b_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry
- Size 5.3MB
- SHA256 0e622d5dc72e23f5790fb75055685d3a45b0113c95879eb07fe6107d759c9f14
- MD5 850067d67296110ff0b440941ea2566b
- SHA1 9fdbd446118597f32005dcd55c49098da45ef608
- SHA512 12324fe687a4809ff74f921e02cec408b2779ef3d3d4b4618bd38f5ba6571854cf3bb7b43cc42d8090679c4a33cf542446c69e443a85067086146d099af094f7
- SSDEEP 98304:njBxcO4EYJUe5itqbGImCf2dYjBxcO4EYJUe5itqbGImCf2dI:njBxcO4ZEtqCIjAYjBxcO4ZEtqCIjAI
- TLSH T137469C56F2A484F6D42780B9C5EA9B7AF6717C144B2043CB6780EB5E1F33BE19839316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory