General
- Target 2026-08-22_b54c118a6630c1eb088079682ae39347_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry
- Size 642KB
- Sample260823-cfpm9sdm7z
- SHA256 152d287b436ce05803a3c3cc96f0a3adedae3f40ece8ac552660853505a25b0d
- MD5 b54c118a6630c1eb088079682ae39347
- SHA1 29134d787551a81b5ba3f91129ae61d0a67bda49
- SHA512 2f34c98d68d367aa4141e2eac617af6ffb2a009fa806d67e236073de23218dc6ac0c238c69c5532a27cdd7a3d74db041654d8bce5d4439b4c2abc7feced783be
- SSDEEP 6144:vik2SN1K8sdIw69dct47h4QpUprOznYoEPFfbCwDITkBXkHQYDfN52R6iAY+Heai:vj9Lw63ct47h4QKAzYzTw4++azf8rp
- TLSH T1DAE45B13B28640B0CD7311B445EAAE7B9635F825471187DFA7C8C929AFB26E16E3D313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-22_b54c118a6630c1eb088079682ae39347_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_b54c118a6630c1eb088079682ae39347_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_b54c118a6630c1eb088079682ae39347_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry
- Size 642KB
- SHA256 152d287b436ce05803a3c3cc96f0a3adedae3f40ece8ac552660853505a25b0d
- MD5 b54c118a6630c1eb088079682ae39347
- SHA1 29134d787551a81b5ba3f91129ae61d0a67bda49
- SHA512 2f34c98d68d367aa4141e2eac617af6ffb2a009fa806d67e236073de23218dc6ac0c238c69c5532a27cdd7a3d74db041654d8bce5d4439b4c2abc7feced783be
- SSDEEP 6144:vik2SN1K8sdIw69dct47h4QpUprOznYoEPFfbCwDITkBXkHQYDfN52R6iAY+Heai:vj9Lw63ct47h4QKAzYzTw4++azf8rp
- TLSH T1DAE45B13B28640B0CD7311B445EAAE7B9635F825471187DFA7C8C929AFB26E16E3D313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory