General
- Target 2026-08-25_9cae2295d9c6309afca2e1471be91d0b_amadey_cobalt-strike_elex_remcos_vidar_wannacry
- Size 1.5MB
- Sample260826-s95vcaeb42
- SHA256 ba82c0262bfb47aa0bdcab4a6277b99001814e394fbdabf2a2820ec52985ceb6
- MD5 9cae2295d9c6309afca2e1471be91d0b
- SHA1 6db84ce7054153bbe9443cb6190a23d37dc0cffe
- SHA512 1bc1927a32bdc1abdb8a1c96ea65c111a037ec828255d0629bfd0be262adb27b5d9558c2e8ae769ce51c307bd4a242bebe63dbfbe4bb178bf0c7946b2d45eb70
- SSDEEP 12288:NcRzSV7xcRzSV7d1JYcRzSV7xcRzSV7d1JJfccRzSV7xcRzSV7d1JYcRzSV7xcR+:FV9VZ1mV9VZ1DsV9VZ1mV9VZ1DpGtUD
- TLSH T13D653A02E7A440A6E59E85B1CBA58615B6377D2007D086CF16D4FA7E0F323D2ADF532B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_9cae2295d9c6309afca2e1471be91d0b_amadey_cobalt-strike_elex_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_9cae2295d9c6309afca2e1471be91d0b_amadey_cobalt-strike_elex_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_9cae2295d9c6309afca2e1471be91d0b_amadey_cobalt-strike_elex_remcos_vidar_wannacry
- Size 1.5MB
- SHA256 ba82c0262bfb47aa0bdcab4a6277b99001814e394fbdabf2a2820ec52985ceb6
- MD5 9cae2295d9c6309afca2e1471be91d0b
- SHA1 6db84ce7054153bbe9443cb6190a23d37dc0cffe
- SHA512 1bc1927a32bdc1abdb8a1c96ea65c111a037ec828255d0629bfd0be262adb27b5d9558c2e8ae769ce51c307bd4a242bebe63dbfbe4bb178bf0c7946b2d45eb70
- SSDEEP 12288:NcRzSV7xcRzSV7d1JYcRzSV7xcRzSV7d1JJfccRzSV7xcRzSV7d1JYcRzSV7xcR+:FV9VZ1mV9VZ1DsV9VZ1mV9VZ1DpGtUD
- TLSH T13D653A02E7A440A6E59E85B1CBA58615B6377D2007D086CF16D4FA7E0F323D2ADF532B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory