General
- Target 2026-08-21_e499fc7970ed288f1d8e55e4321a0f9c_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry
- Size 8.8MB
- Sample260821-p469faep6y
- SHA256 69f63d63a0fb609973f4d80ee42c481071ab07b8fe4c37b76b088643b19e5375
- MD5 e499fc7970ed288f1d8e55e4321a0f9c
- SHA1 9ba65f2160017618e70314d270eace3671df58d0
- SHA512 c67a39c0ed58c3a0fa09ec11e8acdcd052f5d71dc23ff030a121b212835c6909455ff0894a684061dc27cc8f40e03a9367ea22d8b039bd78f578df63155d24f3
- SSDEEP 196608:njBxcO4VjMUjeGjBxcO4VjMUjeGjBxcO4VjMUje+r:Xn5qn5qn5+r
- TLSH T1D4964A067A82C071C86E0EB10929DB75D93CFCE51E64D78FBA88FB7C6A371C09925716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_e499fc7970ed288f1d8e55e4321a0f9c_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_e499fc7970ed288f1d8e55e4321a0f9c_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_e499fc7970ed288f1d8e55e4321a0f9c_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry
- Size 8.8MB
- SHA256 69f63d63a0fb609973f4d80ee42c481071ab07b8fe4c37b76b088643b19e5375
- MD5 e499fc7970ed288f1d8e55e4321a0f9c
- SHA1 9ba65f2160017618e70314d270eace3671df58d0
- SHA512 c67a39c0ed58c3a0fa09ec11e8acdcd052f5d71dc23ff030a121b212835c6909455ff0894a684061dc27cc8f40e03a9367ea22d8b039bd78f578df63155d24f3
- SSDEEP 196608:njBxcO4VjMUjeGjBxcO4VjMUjeGjBxcO4VjMUje+r:Xn5qn5qn5+r
- TLSH T1D4964A067A82C071C86E0EB10929DB75D93CFCE51E64D78FBA88FB7C6A371C09925716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory