General
- Target 2026-08-07_238bff6f0e79be1c0394831e6656f91e_amadey_elex_emotet_glassworm_icedid_remcos_vidar_wannacry
- Size 8.3MB
- Sample260807-v6911aak4t
- SHA256 e5448fa6426f305720f0645be50239805ab13b012ff1f6abe19bf8735cb2e34b
- MD5 238bff6f0e79be1c0394831e6656f91e
- SHA1 926206becfaf78c0f8605cc2f24720c70a6e0db3
- SHA512 a9db4125346426a631c37e25d7b276498d201fe070835de9ced27bd97c6325d8c4db5e457b56a3d05ce581bb1d35351f66d17340f8ce7837e4f4465a5422cfef
- SSDEEP 98304:nu5x6M1WoDDklJ6qdu5x6M1WoDDklJ6qhoq2Vjnm:Qi8kLUi8kLHGn
- TLSH T1B7969E0677E441B9E1BA863496768632E772BC464B30DBDF5690F61E2D33BC09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_238bff6f0e79be1c0394831e6656f91e_amadey_elex_emotet_glassworm_icedid_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_238bff6f0e79be1c0394831e6656f91e_amadey_elex_emotet_glassworm_icedid_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_238bff6f0e79be1c0394831e6656f91e_amadey_elex_emotet_glassworm_icedid_remcos_vidar_wannacry
- Size 8.3MB
- SHA256 e5448fa6426f305720f0645be50239805ab13b012ff1f6abe19bf8735cb2e34b
- MD5 238bff6f0e79be1c0394831e6656f91e
- SHA1 926206becfaf78c0f8605cc2f24720c70a6e0db3
- SHA512 a9db4125346426a631c37e25d7b276498d201fe070835de9ced27bd97c6325d8c4db5e457b56a3d05ce581bb1d35351f66d17340f8ce7837e4f4465a5422cfef
- SSDEEP 98304:nu5x6M1WoDDklJ6qdu5x6M1WoDDklJ6qhoq2Vjnm:Qi8kLUi8kLHGn
- TLSH T1B7969E0677E441B9E1BA863496768632E772BC464B30DBDF5690F61E2D33BC09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry