General
- Target 2026-09-04_6d01a48e01711db2e8249e28149ab983_cobalt-strike_coinminer_elex_glassworm_remcos_vidar_wannacry
- Size 3.8MB
- Sample260905-jk5cvacf47
- SHA256 66f46dc23e8343b34a46227f42b050b80b027d0af6719a7ac8056a1365bc2b95
- MD5 6d01a48e01711db2e8249e28149ab983
- SHA1 d67f162ad24445b99b43c80527eaf48cf36519a7
- SHA512 cb1efc6d39599e69ae2111364b6f4c8f3819a250a66bfb4f19e5467ab203d50148bafe69f30fb1f9fe7519ca0b6267d57442a5c5e60a1ac34c497c8bf4c8ba19
- SSDEEP 49152:F74M2VJSc5XE2+OX6KXjTtetBSO8J/o3RauJIwmfWOPnpPJj5+6d0LkgNp+e4qAA:2H5XbRXjNiwVgI0Nxgw
- TLSH T147067C1BA2E903E8D1B6C238CA955D03F6B6380643316ADF11509E790F7BBF15E7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_6d01a48e01711db2e8249e28149ab983_cobalt-strike_coinminer_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_6d01a48e01711db2e8249e28149ab983_cobalt-strike_coinminer_elex_glassworm_remcos_vidar_wannacry
- Size 3.8MB
- SHA256 66f46dc23e8343b34a46227f42b050b80b027d0af6719a7ac8056a1365bc2b95
- MD5 6d01a48e01711db2e8249e28149ab983
- SHA1 d67f162ad24445b99b43c80527eaf48cf36519a7
- SHA512 cb1efc6d39599e69ae2111364b6f4c8f3819a250a66bfb4f19e5467ab203d50148bafe69f30fb1f9fe7519ca0b6267d57442a5c5e60a1ac34c497c8bf4c8ba19
- SSDEEP 49152:F74M2VJSc5XE2+OX6KXjTtetBSO8J/o3RauJIwmfWOPnpPJj5+6d0LkgNp+e4qAA:2H5XbRXjNiwVgI0Nxgw
- TLSH T147067C1BA2E903E8D1B6C238CA955D03F6B6380643316ADF11509E790F7BBF15E7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.