General
- Target 2026-08-19_04a92c6ed43fa256b806688e2dfdc3fe_amadey_elex_hellokitty_manuscrypt_remcos_sliver_strictor_wannacry
- Size 1.0MB
- Sample260819-hfbpasyera
- SHA256 1d26308a19d9271e240ddd7fbec4740ee103b7141371d8e689c1c93419e13368
- MD5 04a92c6ed43fa256b806688e2dfdc3fe
- SHA1 cfa49ae182c00e711b51372f7bbb09bb3ba2873e
- SHA512 959ca2e54ab9e0dbcc768403029bf6be0edb7124ecbbc2c06e79ee49c353be28d5688b817f297f840d59e110d3213af0738184f245474cc64a2da77b331d5c4a
- SSDEEP 6144:LiettVWiJbC3If6PIi8QUFvpLdJIO6MsubRuQM2NAxvQhKnmyc45tP/iY4eM+VaH:5WOQgbJQ0AxvSlv+
- TLSH T1AB3596667A18D1D7FB1C987AD48C876253601DBACF561032F0E9BABF013EAB05E5523C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_04a92c6ed43fa256b806688e2dfdc3fe_amadey_elex_hellokitty_manuscrypt_remcos_sliver_strictor_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_04a92c6ed43fa256b806688e2dfdc3fe_amadey_elex_hellokitty_manuscrypt_remcos_sliver_strictor_wannacry.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_04a92c6ed43fa256b806688e2dfdc3fe_amadey_elex_hellokitty_manuscrypt_remcos_sliver_strictor_wannacry
- Size 1.0MB
- SHA256 1d26308a19d9271e240ddd7fbec4740ee103b7141371d8e689c1c93419e13368
- MD5 04a92c6ed43fa256b806688e2dfdc3fe
- SHA1 cfa49ae182c00e711b51372f7bbb09bb3ba2873e
- SHA512 959ca2e54ab9e0dbcc768403029bf6be0edb7124ecbbc2c06e79ee49c353be28d5688b817f297f840d59e110d3213af0738184f245474cc64a2da77b331d5c4a
- SSDEEP 6144:LiettVWiJbC3If6PIi8QUFvpLdJIO6MsubRuQM2NAxvQhKnmyc45tP/iY4eM+VaH:5WOQgbJQ0AxvSlv+
- TLSH T1AB3596667A18D1D7FB1C987AD48C876253601DBACF561032F0E9BABF013EAB05E5523C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.