General
- Target 2026-08-13_1bc36eec7edd717136c7b68ae32b076b_amadey_cloudeye_elex_glassworm_hijackloader_wannacry
- Size 5.0MB
- Sample260813-me74bsab72
- SHA256 b32a63155fbff1a9d07138d6b341283cb838e08116278a71c7d6a2596583fc34
- MD5 1bc36eec7edd717136c7b68ae32b076b
- SHA1 4339bd9919f45fe95053eff8e4f27ab99e169b62
- SHA512 6b857054a0ce4f8d0526fbf43a47eb3dc85a3cb49720cab8bdf1dfa582d447ebc8cfdd2e899e289de971b95f07a1426643bd67869e60a66905403503f271a10e
- SSDEEP 49152:3vqlmWdG06pYqBpYqypYqiT3S9tsgX8zEC8ULgCSA/Bkj03Pji0Ajc:3N686r6zTIOSA1jow
- TLSH T127366C12B3F44636E077927EC0B25A6DEB71342A9B32C7CF3144AA6D5D677828536323
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_1bc36eec7edd717136c7b68ae32b076b_amadey_cloudeye_elex_glassworm_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_1bc36eec7edd717136c7b68ae32b076b_amadey_cloudeye_elex_glassworm_hijackloader_wannacry
- Size 5.0MB
- SHA256 b32a63155fbff1a9d07138d6b341283cb838e08116278a71c7d6a2596583fc34
- MD5 1bc36eec7edd717136c7b68ae32b076b
- SHA1 4339bd9919f45fe95053eff8e4f27ab99e169b62
- SHA512 6b857054a0ce4f8d0526fbf43a47eb3dc85a3cb49720cab8bdf1dfa582d447ebc8cfdd2e899e289de971b95f07a1426643bd67869e60a66905403503f271a10e
- SSDEEP 49152:3vqlmWdG06pYqBpYqypYqiT3S9tsgX8zEC8ULgCSA/Bkj03Pji0Ajc:3N686r6zTIOSA1jow
- TLSH T127366C12B3F44636E077927EC0B25A6DEB71342A9B32C7CF3144AA6D5D677828536323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory