General
- Target 2026-09-12_577c733541ed785552b2d1552179d526_cobalt-strike_coinminer_elex_glassworm_remcos_vidar_wannacry
- Size 3.8MB
- Sample260913-bvrwhazand
- SHA256 fab901c21e08c9af5aa675fa1b652ac0c728ea53d05c3ebacd27cbe8bc232328
- MD5 577c733541ed785552b2d1552179d526
- SHA1 71710699888740de1670936b7cb1f18c07c82b2d
- SHA512 433e23f38b9f3077338a35ff5a9abcb7b2af78ecdacb22a86dfefcad25be7ef52a858755bb2ca6f63cde713336316ea51a16088073603423ad909b8c041e1e42
- SSDEEP 49152:q7xM2VJSc5XE2+OX6KXjTtetBSO8J/o3RauJIwmfWOPnpPJj5+6d0LkgNp+e4qAA:+H5XbRXjNiwVgI0Nxgw
- TLSH T16D067D1BA2E903E8D1B6C238CA955D03F6B6380643316ADF11548E790F7BBF15E7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_577c733541ed785552b2d1552179d526_cobalt-strike_coinminer_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_577c733541ed785552b2d1552179d526_cobalt-strike_coinminer_elex_glassworm_remcos_vidar_wannacry
- Size 3.8MB
- SHA256 fab901c21e08c9af5aa675fa1b652ac0c728ea53d05c3ebacd27cbe8bc232328
- MD5 577c733541ed785552b2d1552179d526
- SHA1 71710699888740de1670936b7cb1f18c07c82b2d
- SHA512 433e23f38b9f3077338a35ff5a9abcb7b2af78ecdacb22a86dfefcad25be7ef52a858755bb2ca6f63cde713336316ea51a16088073603423ad909b8c041e1e42
- SSDEEP 49152:q7xM2VJSc5XE2+OX6KXjTtetBSO8J/o3RauJIwmfWOPnpPJj5+6d0LkgNp+e4qAA:+H5XbRXjNiwVgI0Nxgw
- TLSH T16D067D1BA2E903E8D1B6C238CA955D03F6B6380643316ADF11548E790F7BBF15E7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.