General
- Target 2026-08-20_016fdb570aef9fd65dd274f9833c70c0_amadey_elex_glassworm_smoke-loader_stealc_stop_wannacry
- Size 3.6MB
- Sample260821-bgnxpatves
- SHA256 7ef0d46cfd5546f565efd122688fbfe0ad1e0f4dae515b860e0e74899ee7659b
- MD5 016fdb570aef9fd65dd274f9833c70c0
- SHA1 d6b7431c38bef52e54c6609528c458fc5aaa683e
- SHA512 0faeddb400466faf74e12d0f98710dfa9f8283f76eb2b37f7f3f422a468eae6ecd0a9ce7e990a73582562f3847de78047d003b5468aeeb48ba75884cc65c148d
- SSDEEP 24576:tbLguriIfEcQdIVUacMNgef0QeQjG/D8kIq4lHzvs7wQJcnrdC8toex6jH:tnpEKUacBVQej/37wSY88toex6jH
- TLSH T1AA0629D866875E35D80B1D308FC4A25B7361B853C258172F3A5EAE761FE5EC04F0A6B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_016fdb570aef9fd65dd274f9833c70c0_amadey_elex_glassworm_smoke-loader_stealc_stop_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_016fdb570aef9fd65dd274f9833c70c0_amadey_elex_glassworm_smoke-loader_stealc_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_016fdb570aef9fd65dd274f9833c70c0_amadey_elex_glassworm_smoke-loader_stealc_stop_wannacry
- Size 3.6MB
- SHA256 7ef0d46cfd5546f565efd122688fbfe0ad1e0f4dae515b860e0e74899ee7659b
- MD5 016fdb570aef9fd65dd274f9833c70c0
- SHA1 d6b7431c38bef52e54c6609528c458fc5aaa683e
- SHA512 0faeddb400466faf74e12d0f98710dfa9f8283f76eb2b37f7f3f422a468eae6ecd0a9ce7e990a73582562f3847de78047d003b5468aeeb48ba75884cc65c148d
- SSDEEP 24576:tbLguriIfEcQdIVUacMNgef0QeQjG/D8kIq4lHzvs7wQJcnrdC8toex6jH:tnpEKUacBVQej/37wSY88toex6jH
- TLSH T1AA0629D866875E35D80B1D308FC4A25B7361B853C258172F3A5EAE761FE5EC04F0A6B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Contacts a large (2751) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.