General
- Target 2026-09-24_fbfea35f22cd63fcdcf918ec53fa8c9f_cobalt-strike_coinminer_elex_glassworm_stealc_vidar_wannacry
- Size 1.3MB
- Sample260924-txp4ssxt5l
- SHA256 8f0ede65564cc06c0911a63263bf527ac2d4f9f3c2c2727a2eeca0e207eb7594
- MD5 fbfea35f22cd63fcdcf918ec53fa8c9f
- SHA1 77b91ac272cbb29e62393aac5604ee6ff0a87355
- SHA512 6f6aa587a459050ef3f99e9111d34cf60bfb7d8b90d6c411b758efe0d9416776ff702ebc2195a19c0c16c33ef731319d898d7a27dbf61397bd42ed5ff2f59db5
- SSDEEP 24576:O7OPy6Th55m/2Zn2cGflHoq/bXw4IU6wxkgq0OXB+WoiwFVQkul:O7O1t5cuayq/bA4IU6uk1xBx1k4
- TLSH T199556C4762A903ECE1ABE27C5A429901E2B53C4A07759FCF039035761F67BE19E7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_fbfea35f22cd63fcdcf918ec53fa8c9f_cobalt-strike_coinminer_elex_glassworm_stealc_vidar_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_fbfea35f22cd63fcdcf918ec53fa8c9f_cobalt-strike_coinminer_elex_glassworm_stealc_vidar_wannacry
- Size 1.3MB
- SHA256 8f0ede65564cc06c0911a63263bf527ac2d4f9f3c2c2727a2eeca0e207eb7594
- MD5 fbfea35f22cd63fcdcf918ec53fa8c9f
- SHA1 77b91ac272cbb29e62393aac5604ee6ff0a87355
- SHA512 6f6aa587a459050ef3f99e9111d34cf60bfb7d8b90d6c411b758efe0d9416776ff702ebc2195a19c0c16c33ef731319d898d7a27dbf61397bd42ed5ff2f59db5
- SSDEEP 24576:O7OPy6Th55m/2Zn2cGflHoq/bXw4IU6wxkgq0OXB+WoiwFVQkul:O7O1t5cuayq/bA4IU6uk1xBx1k4
- TLSH T199556C4762A903ECE1ABE27C5A429901E2B53C4A07759FCF039035761F67BE19E7E720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.