General
- Target 2026-08-23_891e7df7de87cf0eea801b881c3ad619_amadey_cloudeye_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry
- Size 5.3MB
- Sample260824-hc612atemd
- SHA256 2425a75dce09bf640f58bad60e9ba4461f8c7e58c2818852b4c6958bae27f63e
- MD5 891e7df7de87cf0eea801b881c3ad619
- SHA1 ce9545fb4618d4378dcb7e1df9638f15fb8c4573
- SHA512 1a30dd0bed4d99d73d9c1ef69cae989928dab125f4a4fc652654e0194a7c919641ee8088f066dfd0976a8ea0c1d6f0f9446e1a8fa1534e996bb1521d2cd271a9
- SSDEEP 98304:njBxcO4EYljoW1PszQGpbzs7IV2VvjBxcO4EYljoW1PszQGpbzs7IV2Vu:njBxcO4VjRxs0GpcIV2VvjBxcO4VjRxM
- TLSH T1C346AD02ABD401F1E4B2513095B756729AB6B9100B30D7DF5398EA3E2F73AC19E38767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_891e7df7de87cf0eea801b881c3ad619_amadey_cloudeye_cobalt-strike_elex_glassworm_hijackloade.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_891e7df7de87cf0eea801b881c3ad619_amadey_cloudeye_cobalt-strike_elex_glassworm_hijackloade.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_891e7df7de87cf0eea801b881c3ad619_amadey_cloudeye_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar_wannacry
- Size 5.3MB
- SHA256 2425a75dce09bf640f58bad60e9ba4461f8c7e58c2818852b4c6958bae27f63e
- MD5 891e7df7de87cf0eea801b881c3ad619
- SHA1 ce9545fb4618d4378dcb7e1df9638f15fb8c4573
- SHA512 1a30dd0bed4d99d73d9c1ef69cae989928dab125f4a4fc652654e0194a7c919641ee8088f066dfd0976a8ea0c1d6f0f9446e1a8fa1534e996bb1521d2cd271a9
- SSDEEP 98304:njBxcO4EYljoW1PszQGpbzs7IV2VvjBxcO4EYljoW1PszQGpbzs7IV2Vu:njBxcO4VjRxs0GpcIV2VvjBxcO4VjRxM
- TLSH T1C346AD02ABD401F1E4B2513095B756729AB6B9100B30D7DF5398EA3E2F73AC19E38767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory