General
- Target 2026-08-04_28fb9c8146e98b278c1f439e7e86c31a_amadey_elex_glassworm_rhadamanthys_smoke-loader_stop_wannacry
- Size 847KB
- Sample260804-zm75hszdpb
- SHA256 da3a0a40bc3803715db645abc44af04910d8c0945bff370aa64d65b3bc763df3
- MD5 28fb9c8146e98b278c1f439e7e86c31a
- SHA1 28d0c13942f6e88df146afc16d17a6f581fff55f
- SHA512 13507e15ba3e6bf2105b1d393c9c2d2c9e038df4f49bdcc205023b807161351af6d7eb1a1db800276e46b1b51836e71e26ce4e4725311248c06ac6f90a847227
- SSDEEP 12288:H9WphJx7kSWrNgRRzSr32GgzJCfGruf026ZlmR70Y/k9VS+LPMRB:H9WXJ9/Xu72NlRuf0XoxUS+Lkf
- TLSH T16C057C0639FCC237E2D25530CE6CF791B0FABA684F21498737D41A5C2A766D2A32671D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_28fb9c8146e98b278c1f439e7e86c31a_amadey_elex_glassworm_rhadamanthys_smoke-loader_stop_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_28fb9c8146e98b278c1f439e7e86c31a_amadey_elex_glassworm_rhadamanthys_smoke-loader_stop_wannacry.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_28fb9c8146e98b278c1f439e7e86c31a_amadey_elex_glassworm_rhadamanthys_smoke-loader_stop_wannacry
- Size 847KB
- SHA256 da3a0a40bc3803715db645abc44af04910d8c0945bff370aa64d65b3bc763df3
- MD5 28fb9c8146e98b278c1f439e7e86c31a
- SHA1 28d0c13942f6e88df146afc16d17a6f581fff55f
- SHA512 13507e15ba3e6bf2105b1d393c9c2d2c9e038df4f49bdcc205023b807161351af6d7eb1a1db800276e46b1b51836e71e26ce4e4725311248c06ac6f90a847227
- SSDEEP 12288:H9WphJx7kSWrNgRRzSr32GgzJCfGruf026ZlmR70Y/k9VS+LPMRB:H9WXJ9/Xu72NlRuf0XoxUS+Lkf
- TLSH T16C057C0639FCC237E2D25530CE6CF791B0FABA684F21498737D41A5C2A766D2A32671D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1