General
- Target 2026-08-11_8f29dfd1e0e72659f890f4149c73c0e4_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry
- Size 3.4MB
- Sample260811-hl5vbstyhs
- SHA256 0551b4dc8bc93198c45d165a1d07ab5ef6c07ce94e44f333c189cff7040df60d
- MD5 8f29dfd1e0e72659f890f4149c73c0e4
- SHA1 93ed2f8f1a91f1730d22a29488b0d20fd3ad7499
- SHA512 8e261d0ba273977fc9c7d8e020f550ba407239940abb661e38d2dd1fd1c9631d3c624348c1f6e0faa120aef3a32f80b070bec5a7cb7fb242fae7e796fcbafa63
- SSDEEP 49152:vj9LxcO4Q5Yr649/PhBsEZUJK9DBjcc/FCPjDj8hXWvbGSL+6wI1zTJIUCVO88he:vjBxcO4EYj/PYXq9ouFklp+6wM/h1+v
- TLSH T1DBF58E13B7F445B5E47381BAC596AA36D7B2B4110B30C7CB4351CA596F33AD29E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-11_8f29dfd1e0e72659f890f4149c73c0e4_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_8f29dfd1e0e72659f890f4149c73c0e4_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_8f29dfd1e0e72659f890f4149c73c0e4_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry
- Size 3.4MB
- SHA256 0551b4dc8bc93198c45d165a1d07ab5ef6c07ce94e44f333c189cff7040df60d
- MD5 8f29dfd1e0e72659f890f4149c73c0e4
- SHA1 93ed2f8f1a91f1730d22a29488b0d20fd3ad7499
- SHA512 8e261d0ba273977fc9c7d8e020f550ba407239940abb661e38d2dd1fd1c9631d3c624348c1f6e0faa120aef3a32f80b070bec5a7cb7fb242fae7e796fcbafa63
- SSDEEP 49152:vj9LxcO4Q5Yr649/PhBsEZUJK9DBjcc/FCPjDj8hXWvbGSL+6wI1zTJIUCVO88he:vjBxcO4EYj/PYXq9ouFklp+6wM/h1+v
- TLSH T1DBF58E13B7F445B5E47381BAC596AA36D7B2B4110B30C7CB4351CA596F33AD29E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory