General
- Target 2026-07-31_8b10ab53e01c19c7de65a9a90bd8a22d_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry
- Size 6.8MB
- Sample260731-gbt5eavejf
- SHA256 dbe51a7659fc9c1bbfa2ad62484bfc189f8551b9942efa7e5923a71a4c495df1
- MD5 8b10ab53e01c19c7de65a9a90bd8a22d
- SHA1 3d22ac23a4971b31548d059f1dcbe9724b72e0d6
- SHA512 67d413398cef23be4c8827d26e9fbcd2b264b6e5b4ab567e38e30379b7c1d4a224fa02c8a9ba180efd906a008bc36976b5d9c26fdc762abbd6ca34f298403056
- SSDEEP 196608:vjBxcO4yjBxcO4yjBxcO4yjBxcO4CjBxcO4yjBxcO4yjBxcO4yjBxcO4CjBxcO49:////b///b///b///b///0
- TLSH T18D762A17A34744B2CE7302B10547AB7F9A34D92880168A5AFB88DD25FFB75916E3D323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-31_8b10ab53e01c19c7de65a9a90bd8a22d_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_8b10ab53e01c19c7de65a9a90bd8a22d_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_8b10ab53e01c19c7de65a9a90bd8a22d_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry
- Size 6.8MB
- SHA256 dbe51a7659fc9c1bbfa2ad62484bfc189f8551b9942efa7e5923a71a4c495df1
- MD5 8b10ab53e01c19c7de65a9a90bd8a22d
- SHA1 3d22ac23a4971b31548d059f1dcbe9724b72e0d6
- SHA512 67d413398cef23be4c8827d26e9fbcd2b264b6e5b4ab567e38e30379b7c1d4a224fa02c8a9ba180efd906a008bc36976b5d9c26fdc762abbd6ca34f298403056
- SSDEEP 196608:vjBxcO4yjBxcO4yjBxcO4yjBxcO4CjBxcO4yjBxcO4yjBxcO4yjBxcO4CjBxcO49:////b///b///b///b///0
- TLSH T18D762A17A34744B2CE7302B10547AB7F9A34D92880168A5AFB88DD25FFB75916E3D323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory