General
- Target 2026-09-07_bf2fb8f35dad7cbf52c4e26735727b9f_amadey_cobalt-strike_elex_glassworm_hijackloader_wannacry
- Size 2.3MB
- Sample260908-hprrwadf33
- SHA256 cd75cf8fc002437d436ae7f1deb7dc9016cc3f58279be049ca1aeaf6e8e9ca65
- MD5 bf2fb8f35dad7cbf52c4e26735727b9f
- SHA1 2ec1a16f35e71064bb071be96806f5956f6c5e83
- SHA512 b07c78d224469de9b30ecaaccb526a18306edb1f3b36e701e5e5b88288c7d6b2665900aba1040e622f170c1f4dddb7d507451e81eead5d112d68e8612c5c6b06
- SSDEEP 49152:NoMl8D1Ssmb4dHzxDVO88BoMl8D1Ssmb4dHzxDVO88e:NoMl8D1jmb2zxA/BoMl8D1jmb2zxA/e
- TLSH T12FB57C23F25540B6D07241B0829AA63FD334BD65033195DB97C0DE29BFA7AD2993A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_bf2fb8f35dad7cbf52c4e26735727b9f_amadey_cobalt-strike_elex_glassworm_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_bf2fb8f35dad7cbf52c4e26735727b9f_amadey_cobalt-strike_elex_glassworm_hijackloader_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_bf2fb8f35dad7cbf52c4e26735727b9f_amadey_cobalt-strike_elex_glassworm_hijackloader_wannacry
- Size 2.3MB
- SHA256 cd75cf8fc002437d436ae7f1deb7dc9016cc3f58279be049ca1aeaf6e8e9ca65
- MD5 bf2fb8f35dad7cbf52c4e26735727b9f
- SHA1 2ec1a16f35e71064bb071be96806f5956f6c5e83
- SHA512 b07c78d224469de9b30ecaaccb526a18306edb1f3b36e701e5e5b88288c7d6b2665900aba1040e622f170c1f4dddb7d507451e81eead5d112d68e8612c5c6b06
- SSDEEP 49152:NoMl8D1Ssmb4dHzxDVO88BoMl8D1Ssmb4dHzxDVO88e:NoMl8D1jmb2zxA/BoMl8D1jmb2zxA/e
- TLSH T12FB57C23F25540B6D07241B0829AA63FD334BD65033195DB97C0DE29BFA7AD2993A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory