General
- Target 2026-08-16_0ad8abd2fc14e1e745acca4c5bc74cd6_amadey_cobalt-strike_elex_emotet_glassworm_remcos_stealc_vidar_wannacry
- Size 28.1MB
- Sample260816-nv8v8sda74
- SHA256 c6d31ba1c323037160afe9e2b6190e0f375ead6f87c3ef2b5c030c80a1fe3865
- MD5 0ad8abd2fc14e1e745acca4c5bc74cd6
- SHA1 d775ab7687015a3267da39afa93918f220ac5d63
- SHA512 3555f1872f4a3def06753c1e3f295b9736cc3973b334a3ad3f4800779352f8714f9e5fc0391af3bff5e0d3ae394764304c98d2e4ef5482d2b428eaf2fde4c15a
- SSDEEP 196608:Ji8kbi8kKUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:FkzkKUEtQevvqc2W1cpV2XI32i
- TLSH T153574B91BBE443E2E3AA953484B582B6EBB1BC0E1F31933F5179F21E1E376905D15322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_0ad8abd2fc14e1e745acca4c5bc74cd6_amadey_cobalt-strike_elex_emotet_glassworm_remcos_stealc_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_0ad8abd2fc14e1e745acca4c5bc74cd6_amadey_cobalt-strike_elex_emotet_glassworm_remcos_stealc_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_0ad8abd2fc14e1e745acca4c5bc74cd6_amadey_cobalt-strike_elex_emotet_glassworm_remcos_stealc_vidar_wannacry
- Size 28.1MB
- SHA256 c6d31ba1c323037160afe9e2b6190e0f375ead6f87c3ef2b5c030c80a1fe3865
- MD5 0ad8abd2fc14e1e745acca4c5bc74cd6
- SHA1 d775ab7687015a3267da39afa93918f220ac5d63
- SHA512 3555f1872f4a3def06753c1e3f295b9736cc3973b334a3ad3f4800779352f8714f9e5fc0391af3bff5e0d3ae394764304c98d2e4ef5482d2b428eaf2fde4c15a
- SSDEEP 196608:Ji8kbi8kKUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:FkzkKUEtQevvqc2W1cpV2XI32i
- TLSH T153574B91BBE443E2E3AA953484B582B6EBB1BC0E1F31933F5179F21E1E376905D15322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application