General
- Target 2026-09-04_a826e88421a670421a32573427b1bffe_amadey_darkgate_elex_glassworm_hawkeye_remcos_vidar_wannacry
- Size 3.1MB
- Sample260905-bdw4wstfja
- SHA256 fb0d7f1b7333f52127cc5e648ca928326bc221bfad2838baae509c28bd3d1bad
- MD5 a826e88421a670421a32573427b1bffe
- SHA1 9b9c219ea3aed0d12f3b7b5b5c383d6f8f308ff5
- SHA512 7dd9e6551185b72184bdd5266d6dee479d323261705b8a1c97c1f2ae5ec51fe10028c8ee18f06b1502e79f6f36ca18401886ed0cd39083a6ee569825a8f2fc88
- SSDEEP 49152:U+E3qatglOr+E3qatgl+p+EeC5g+E3qatgl+p+Ex+E3qatgl+p+EeC5g+E3qatgJ:gR350l35087p
- TLSH T1B6E54B49B7E95161F5B346708CBA82B65D31BC208F31C7EF6680B72D5E326C0E935B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_a826e88421a670421a32573427b1bffe_amadey_darkgate_elex_glassworm_hawkeye_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_a826e88421a670421a32573427b1bffe_amadey_darkgate_elex_glassworm_hawkeye_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_a826e88421a670421a32573427b1bffe_amadey_darkgate_elex_glassworm_hawkeye_remcos_vidar_wannacry
- Size 3.1MB
- SHA256 fb0d7f1b7333f52127cc5e648ca928326bc221bfad2838baae509c28bd3d1bad
- MD5 a826e88421a670421a32573427b1bffe
- SHA1 9b9c219ea3aed0d12f3b7b5b5c383d6f8f308ff5
- SHA512 7dd9e6551185b72184bdd5266d6dee479d323261705b8a1c97c1f2ae5ec51fe10028c8ee18f06b1502e79f6f36ca18401886ed0cd39083a6ee569825a8f2fc88
- SSDEEP 49152:U+E3qatglOr+E3qatgl+p+EeC5g+E3qatgl+p+Ex+E3qatgl+p+EeC5g+E3qatgJ:gR350l35087p
- TLSH T1B6E54B49B7E95161F5B346708CBA82B65D31BC208F31C7EF6680B72D5E326C0E935B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1