General
- Target 2026-08-16_9e01b570b42ebd633651e6ce8cb82871_amadey_cobalt-strike_elex_emotet_glassworm_remcos_vidar_wannacry
- Size 8.8MB
- Sample260816-cf12asbm4v
- SHA256 77572e2398ed81e96a1b451a57268d999e184b7197eb407117640c2c8fe2c967
- MD5 9e01b570b42ebd633651e6ce8cb82871
- SHA1 a83809f75a2174b3e2c31d41bd7330ea25e6dd4e
- SHA512 08dfb7cfb80793ae9ea560ecfa0b90cf248cf4bf5fb5f92013e8d141131c13063c46d902047c2284c53bf34d5ff3a4b5c0e18002b8041cd93a9dfb7d530cc7a4
- SSDEEP 98304:Su5x6M1WoDDklPoq2VjnmOu5x6M1WoDDklPoq2VjnmWj:Ji8ktGnoi8ktGn/j
- TLSH T11F968D4576A881B5D1FAC6348566C636F372BC054B30D7DF5296B61E2E33BD08E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_9e01b570b42ebd633651e6ce8cb82871_amadey_cobalt-strike_elex_emotet_glassworm_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_9e01b570b42ebd633651e6ce8cb82871_amadey_cobalt-strike_elex_emotet_glassworm_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_9e01b570b42ebd633651e6ce8cb82871_amadey_cobalt-strike_elex_emotet_glassworm_remcos_vidar_wannacry
- Size 8.8MB
- SHA256 77572e2398ed81e96a1b451a57268d999e184b7197eb407117640c2c8fe2c967
- MD5 9e01b570b42ebd633651e6ce8cb82871
- SHA1 a83809f75a2174b3e2c31d41bd7330ea25e6dd4e
- SHA512 08dfb7cfb80793ae9ea560ecfa0b90cf248cf4bf5fb5f92013e8d141131c13063c46d902047c2284c53bf34d5ff3a4b5c0e18002b8041cd93a9dfb7d530cc7a4
- SSDEEP 98304:Su5x6M1WoDDklPoq2VjnmOu5x6M1WoDDklPoq2VjnmWj:Ji8ktGnoi8ktGn/j
- TLSH T11F968D4576A881B5D1FAC6348566C636F372BC054B30D7DF5296B61E2E33BD08E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry