General
- Target 2026-08-08_8302c5bb15bfd37ae033c716ae95ad06_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry
- Size 2.5MB
- Sample260808-fkxffstxet
- SHA256 ae3ecbf6390e643b9e502a3ec2184a9267a0af1aedca4591e637f7718bf88094
- MD5 8302c5bb15bfd37ae033c716ae95ad06
- SHA1 8733b5bd8269e144a8c9bb3336aacba5b199f27b
- SHA512 5feae0ab003e1486b0d5fd012609984e686e0ef228dbef495530a01454d9026ab856098833f408fad9674b24b419d2c79e3ad33645aabd6ccc312690bb994154
- SSDEEP 49152:jj9LxcO4Q5Yt/qCPH8Aj9LxcO4Q5Yt/qCPH8Aj9LxcO4Q5Yt/qCPH8o:jjBxcO4EYt/1P8AjBxcO4EYt/1P8AjBS
- TLSH T1A3C57E22B3D64075E9B3067109BBDB7A5638FD205A21C74FA348E91DAF736909D39323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-08_8302c5bb15bfd37ae033c716ae95ad06_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_8302c5bb15bfd37ae033c716ae95ad06_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_8302c5bb15bfd37ae033c716ae95ad06_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry
- Size 2.5MB
- SHA256 ae3ecbf6390e643b9e502a3ec2184a9267a0af1aedca4591e637f7718bf88094
- MD5 8302c5bb15bfd37ae033c716ae95ad06
- SHA1 8733b5bd8269e144a8c9bb3336aacba5b199f27b
- SHA512 5feae0ab003e1486b0d5fd012609984e686e0ef228dbef495530a01454d9026ab856098833f408fad9674b24b419d2c79e3ad33645aabd6ccc312690bb994154
- SSDEEP 49152:jj9LxcO4Q5Yt/qCPH8Aj9LxcO4Q5Yt/qCPH8Aj9LxcO4Q5Yt/qCPH8o:jjBxcO4EYt/1P8AjBxcO4EYt/1P8AjBS
- TLSH T1A3C57E22B3D64075E9B3067109BBDB7A5638FD205A21C74FA348E91DAF736909D39323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory