General
- Target 2026-09-05_629196f19177315ba02bf07fa225d739_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_vidar_wannacry
- Size 21.1MB
- Sample260907-yyfc7sfp91
- SHA256 76b1d84f7e2c15b3eef1d480b2812bc3459fce440d146417ed41547322ec34e0
- MD5 629196f19177315ba02bf07fa225d739
- SHA1 7703d52f36c8a802926de9d818103ea9298def1e
- SHA512 21c4412e287182f27c2280ae71c67efee4b4f1be5e1f23824c22edc64331bc1f7691c5991389cf95edf276ca4fc2c2b2f81cac1ce4509e170663b6daf29c2d65
- SSDEEP 393216:3IIIkIIIkIIIkIIIkIIIkIIIkIIIkIIIkIIIo:N
- TLSH T164275C01FA81CF71D56F0131499BD2BA4A6B7D208F218BD7A3887F2EBA317C16935617
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_629196f19177315ba02bf07fa225d739_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_629196f19177315ba02bf07fa225d739_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_629196f19177315ba02bf07fa225d739_amadey_elex_glassworm_hijackloader_luca-stealer_njrat_vidar_wannacry
- Size 21.1MB
- SHA256 76b1d84f7e2c15b3eef1d480b2812bc3459fce440d146417ed41547322ec34e0
- MD5 629196f19177315ba02bf07fa225d739
- SHA1 7703d52f36c8a802926de9d818103ea9298def1e
- SHA512 21c4412e287182f27c2280ae71c67efee4b4f1be5e1f23824c22edc64331bc1f7691c5991389cf95edf276ca4fc2c2b2f81cac1ce4509e170663b6daf29c2d65
- SSDEEP 393216:3IIIkIIIkIIIkIIIkIIIkIIIkIIIkIIIkIIIo:N
- TLSH T164275C01FA81CF71D56F0131499BD2BA4A6B7D208F218BD7A3887F2EBA317C16935617
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1