General
- Target 2026-08-08_2abc536b63c9db6fdb23d773245ed69d_amadey_elex_glassworm_remcos_smoke-loader_vidar_wannacry
- Size 11.3MB
- Sample260808-wps7labm7s
- SHA256 2f13f779b7994b2310a98f6844efa6fb47e3fcd9c3bb34054acb552eeb82cbbc
- MD5 2abc536b63c9db6fdb23d773245ed69d
- SHA1 4fd9608529ab8dd371caadc27e92614a9177bd43
- SHA512 25e29733a1a7b789dae1ea88042c627bf51dfd8b2082ef77b393b8a5a6785c91d037ce48237fceba674e5994c1b8e71f2bbcee96836150073b2c525ef068cbef
- SSDEEP 49152:nj9LxcO4Q5YljgHQko8z8obnyMWmddjZ7xlo5m:njBxcO4EYljgrU5m
- TLSH T1AAC6F5197298C064D466433499A591A69971BC205B2186FFEE74F63CEF3F9F08A3CB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_2abc536b63c9db6fdb23d773245ed69d_amadey_elex_glassworm_remcos_smoke-loader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_2abc536b63c9db6fdb23d773245ed69d_amadey_elex_glassworm_remcos_smoke-loader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_2abc536b63c9db6fdb23d773245ed69d_amadey_elex_glassworm_remcos_smoke-loader_vidar_wannacry
- Size 11.3MB
- SHA256 2f13f779b7994b2310a98f6844efa6fb47e3fcd9c3bb34054acb552eeb82cbbc
- MD5 2abc536b63c9db6fdb23d773245ed69d
- SHA1 4fd9608529ab8dd371caadc27e92614a9177bd43
- SHA512 25e29733a1a7b789dae1ea88042c627bf51dfd8b2082ef77b393b8a5a6785c91d037ce48237fceba674e5994c1b8e71f2bbcee96836150073b2c525ef068cbef
- SSDEEP 49152:nj9LxcO4Q5YljgHQko8z8obnyMWmddjZ7xlo5m:njBxcO4EYljgrU5m
- TLSH T1AAC6F5197298C064D466433499A591A69971BC205B2186FFEE74F63CEF3F9F08A3CB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory