General
- Target 2026-09-08_4125a61291af73cfaaaf081642af9724_cobalt-strike_coinminer_elex_glassworm_remcos_vidar_wannacry
- Size 3.8MB
- Sample260908-v9fxbsvyhs
- SHA256 523bea88cfb271edb47b895fb4dbc704f006fe567803a06e7103c32be5def65a
- MD5 4125a61291af73cfaaaf081642af9724
- SHA1 7352e2b3126d3717322a73deeb90095ff72c85d3
- SHA512 93e1e67eee5bd23180a03ead37d9b64e174b154082dd75f55c425d8b3b8c0d7ae1c68de6a0b2cb41c24a61fe30aa3d05cf720b4df0e6ad70f423543f7c27a43a
- SSDEEP 49152:k7TBh/6gr+48AYs9pavbNmCrhJFNIvOL5Ifn0sP5pP/j5mzV0DkgNp+eTFMUiTry:kr+40F0oFWsg2D3gn
- TLSH T1C6067C5BA2E603ECE176D238CB965903F2B638054731AADB11509E790F77BF14EB9B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_4125a61291af73cfaaaf081642af9724_cobalt-strike_coinminer_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_4125a61291af73cfaaaf081642af9724_cobalt-strike_coinminer_elex_glassworm_remcos_vidar_wannacry
- Size 3.8MB
- SHA256 523bea88cfb271edb47b895fb4dbc704f006fe567803a06e7103c32be5def65a
- MD5 4125a61291af73cfaaaf081642af9724
- SHA1 7352e2b3126d3717322a73deeb90095ff72c85d3
- SHA512 93e1e67eee5bd23180a03ead37d9b64e174b154082dd75f55c425d8b3b8c0d7ae1c68de6a0b2cb41c24a61fe30aa3d05cf720b4df0e6ad70f423543f7c27a43a
- SSDEEP 49152:k7TBh/6gr+48AYs9pavbNmCrhJFNIvOL5Ifn0sP5pP/j5mzV0DkgNp+eTFMUiTry:kr+40F0oFWsg2D3gn
- TLSH T1C6067C5BA2E603ECE176D238CB965903F2B638054731AADB11509E790F77BF14EB9B01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.