General
- Target 2026-08-17_2b23a413241375e03cc11532a539220b_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry
- Size 2.8MB
- Sample260817-cvefvasse1
- SHA256 a644337d3d58cc5e431b3e86df529b6474a0ac73ca02737e634926601b44feab
- MD5 2b23a413241375e03cc11532a539220b
- SHA1 2ac44966284713a0583327b456abf9203a87f70e
- SHA512 bd4b870d5cd530d0e3b5c023ff8d83b0794c1d870e141f020af7d4dec28acb1ffd35b3df7f4286836b82fc0815f7bd8913aa678f5f8e840fd63e5b14624065c2
- SSDEEP 49152:vj9LxcO4Q5Yr649/PhBsEZUJK9Kj9LxcO4Q5Yr649/PhBsEZUJK9o:vjBxcO4EYj/PYXqKjBxcO4EYj/PYXqo
- TLSH T1ACD58D1377E140B1F97311B655BEBA3A9677F8100B21C3DB5784CA19AF326C29E3A352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-17_2b23a413241375e03cc11532a539220b_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_2b23a413241375e03cc11532a539220b_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_2b23a413241375e03cc11532a539220b_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry
- Size 2.8MB
- SHA256 a644337d3d58cc5e431b3e86df529b6474a0ac73ca02737e634926601b44feab
- MD5 2b23a413241375e03cc11532a539220b
- SHA1 2ac44966284713a0583327b456abf9203a87f70e
- SHA512 bd4b870d5cd530d0e3b5c023ff8d83b0794c1d870e141f020af7d4dec28acb1ffd35b3df7f4286836b82fc0815f7bd8913aa678f5f8e840fd63e5b14624065c2
- SSDEEP 49152:vj9LxcO4Q5Yr649/PhBsEZUJK9Kj9LxcO4Q5Yr649/PhBsEZUJK9o:vjBxcO4EYj/PYXqKjBxcO4EYj/PYXqo
- TLSH T1ACD58D1377E140B1F97311B655BEBA3A9677F8100B21C3DB5784CA19AF326C29E3A352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory