General
- Target 2026-08-09_6f6f61cc385e922c7282b5fb597172c8_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry
- Size 2.8MB
- Sample260809-t46p5asajc
- SHA256 a19a1443d78fd7c2340155ea2e828dcd31d0ca744f098ca47f82c1864a2dcb70
- MD5 6f6f61cc385e922c7282b5fb597172c8
- SHA1 8d3cdc47566120ca9c96531e175b37a9a7f30c1e
- SHA512 127d5418dce4428fb7e6f14c136ad7e013d6841c79d851bd0c261ae8ec571edff49687fa7f21abc9a1c6c193bb1ffcc6a93e554b883840e86f74a7733cf68744
- SSDEEP 49152:vj9LYcO4Q5YMj9LYcO4Q5YMj9LYcO4Q5YMj9LYcO4Q5YGjguzBFzB3LgVLKRWTQd:vjBYcO4EYMjBYcO4EYMjBYcO4EYMjBY7
- TLSH T1A1D59E13B34640B2DE731570055BAB7B9A39EE2440258A5EE788FD29AFB35C16E3D313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-09_6f6f61cc385e922c7282b5fb597172c8_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_6f6f61cc385e922c7282b5fb597172c8_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_6f6f61cc385e922c7282b5fb597172c8_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry
- Size 2.8MB
- SHA256 a19a1443d78fd7c2340155ea2e828dcd31d0ca744f098ca47f82c1864a2dcb70
- MD5 6f6f61cc385e922c7282b5fb597172c8
- SHA1 8d3cdc47566120ca9c96531e175b37a9a7f30c1e
- SHA512 127d5418dce4428fb7e6f14c136ad7e013d6841c79d851bd0c261ae8ec571edff49687fa7f21abc9a1c6c193bb1ffcc6a93e554b883840e86f74a7733cf68744
- SSDEEP 49152:vj9LYcO4Q5YMj9LYcO4Q5YMj9LYcO4Q5YMj9LYcO4Q5YGjguzBFzB3LgVLKRWTQd:vjBYcO4EYMjBYcO4EYMjBYcO4EYMjBY7
- TLSH T1A1D59E13B34640B2DE731570055BAB7B9A39EE2440258A5EE788FD29AFB35C16E3D313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory