General
- Target 2026-08-14_05e0210e72959c9f1d5ffa0e7bb3d87a_amadey_elex_emotet_glassworm_remcos_vidar_wannacry
- Size 6.5MB
- Sample260814-yleadazhld
- SHA256 4efbce411f25c20cdedbfc3d542d20e271cb898b73e1bf32a52ccfd3fbd5ab96
- MD5 05e0210e72959c9f1d5ffa0e7bb3d87a
- SHA1 afa7de8a5c21cff3a2585e4e204c62641e79bc20
- SHA512 a787acfe87b19da99cc446143d8384aa26cf56f31908b21b9fde78d05e0e187de47a633a0039e5ec29d3462a0ce76b093338a174128cac61d0aeb3921427fcea
- SSDEEP 49152:tYRw5x6M1WoMCxfRqnqY6CbRquA/m2yL5zbfFiV+XenmE3/zLCbRquA/m2yL5zb+:Su5x6M1WoDDklPoq2VjnmHoq2Vjnm
- TLSH T178668D0576A881B4D1F6C77885A6C667F3717C054B3097EF5266B61E2E33BD08E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_05e0210e72959c9f1d5ffa0e7bb3d87a_amadey_elex_emotet_glassworm_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_05e0210e72959c9f1d5ffa0e7bb3d87a_amadey_elex_emotet_glassworm_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_05e0210e72959c9f1d5ffa0e7bb3d87a_amadey_elex_emotet_glassworm_remcos_vidar_wannacry
- Size 6.5MB
- SHA256 4efbce411f25c20cdedbfc3d542d20e271cb898b73e1bf32a52ccfd3fbd5ab96
- MD5 05e0210e72959c9f1d5ffa0e7bb3d87a
- SHA1 afa7de8a5c21cff3a2585e4e204c62641e79bc20
- SHA512 a787acfe87b19da99cc446143d8384aa26cf56f31908b21b9fde78d05e0e187de47a633a0039e5ec29d3462a0ce76b093338a174128cac61d0aeb3921427fcea
- SSDEEP 49152:tYRw5x6M1WoMCxfRqnqY6CbRquA/m2yL5zbfFiV+XenmE3/zLCbRquA/m2yL5zb+:Su5x6M1WoDDklPoq2VjnmHoq2Vjnm
- TLSH T178668D0576A881B4D1F6C77885A6C667F3717C054B3097EF5266B61E2E33BD08E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry