General
- Target 2026-08-08_d0f9b3b7cb9e46004f5e2f97fb67f540_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 4.1MB
- Sample260808-rhblrastgx
- SHA256 96d731813a27a0844c7961a6882e4414c71b67154849bed812890530d62bd2e3
- MD5 d0f9b3b7cb9e46004f5e2f97fb67f540
- SHA1 4b257d919b0c90972a2df71d4220dd138c855f1b
- SHA512 08f22603afb8ac489b51d3d39ee675d03fe8ee9cbafb5252e1a86e4e64a38f3b23df571a02929e6bc1a99ffae644e239ac8a99f5a1873989a941d132bdac5bdf
- SSDEEP 98304:njBxcO4EYlj38m7IwJV3+hnUm8Utdmnpp:njBxcO4VjlN+h18Utd0j
- TLSH T19D167B13B25444E9D16AC174CE46C236D771BC1947F2A6EF3690BADA2E73AD03B3A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_d0f9b3b7cb9e46004f5e2f97fb67f540_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_d0f9b3b7cb9e46004f5e2f97fb67f540_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_d0f9b3b7cb9e46004f5e2f97fb67f540_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar_wannacry
- Size 4.1MB
- SHA256 96d731813a27a0844c7961a6882e4414c71b67154849bed812890530d62bd2e3
- MD5 d0f9b3b7cb9e46004f5e2f97fb67f540
- SHA1 4b257d919b0c90972a2df71d4220dd138c855f1b
- SHA512 08f22603afb8ac489b51d3d39ee675d03fe8ee9cbafb5252e1a86e4e64a38f3b23df571a02929e6bc1a99ffae644e239ac8a99f5a1873989a941d132bdac5bdf
- SSDEEP 98304:njBxcO4EYlj38m7IwJV3+hnUm8Utdmnpp:njBxcO4VjlN+h18Utd0j
- TLSH T19D167B13B25444E9D16AC174CE46C236D771BC1947F2A6EF3690BADA2E73AD03B3A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory