General
- Target 2026-09-12_e1639f5fe4fa8dfb548a733cf13057e1_cobalt-strike_coinminer_elex_glassworm_stealc_vidar_wannacry
- Size 1.3MB
- Sample260912-tf7yaazfja
- SHA256 2ceeca3c49a38126a3347e50e037277106e14d17ec68a0d124c2b81d602a7b41
- MD5 e1639f5fe4fa8dfb548a733cf13057e1
- SHA1 ffa5cc01efd428e4adf9f6cf8873a79e4b4e06d8
- SHA512 dfaf5679908ebe5f77adfb055320086d4eedca4f62c4ac5c44b98e5bec2dba8bf6ad0b1bff64dfba2c46e0ea6b028a9f7f441130066a01435a98ca481b3d4beb
- SSDEEP 24576:I7YWl/g1erBza03ZBcTQXTlw6p5XDVIPXOzS0oVBuavOlCNkLHF:I7Yx1e12a/cw26p5TVIPezSrBSlmkLl
- TLSH T1C8558E0776EE02FCE56FD27895468901E2B63C4A07359BCB039026761F67BE19E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_e1639f5fe4fa8dfb548a733cf13057e1_cobalt-strike_coinminer_elex_glassworm_stealc_vidar_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_e1639f5fe4fa8dfb548a733cf13057e1_cobalt-strike_coinminer_elex_glassworm_stealc_vidar_wannacry
- Size 1.3MB
- SHA256 2ceeca3c49a38126a3347e50e037277106e14d17ec68a0d124c2b81d602a7b41
- MD5 e1639f5fe4fa8dfb548a733cf13057e1
- SHA1 ffa5cc01efd428e4adf9f6cf8873a79e4b4e06d8
- SHA512 dfaf5679908ebe5f77adfb055320086d4eedca4f62c4ac5c44b98e5bec2dba8bf6ad0b1bff64dfba2c46e0ea6b028a9f7f441130066a01435a98ca481b3d4beb
- SSDEEP 24576:I7YWl/g1erBza03ZBcTQXTlw6p5XDVIPXOzS0oVBuavOlCNkLHF:I7Yx1e12a/cw26p5TVIPezSrBSlmkLl
- TLSH T1C8558E0776EE02FCE56FD27895468901E2B63C4A07359BCB039026761F67BE19E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.