General
- Target 2026-09-24_55f4b57fb6d68e73b27c45d1e2a6e2d6_cobalt-strike_coinminer_elex_glassworm_remcos_vidar_wannacry
- Size 3.8MB
- Sample260925-lj3tqsda69
- SHA256 839c8a6f0a305aa1c7eb83b5064323c9cafd147ffa3d47997a3267cea64b5f5f
- MD5 55f4b57fb6d68e73b27c45d1e2a6e2d6
- SHA1 dc6cfb3dc55273b80b0ffe9c4ee7fe3309002c3f
- SHA512 fe9d53d83a2403978f5770e7932bf00fc8582c775b6582e0e9a37206d465fac5e94c4fb8832f6c43787ee8835a06781299f51ff0e2897a104d9fa74a0d259be7
- SSDEEP 49152:O7TBh/6gr+48AYs9pavbNmCrhJFNIvOL5Ifn0sP5pP/j5mzV0DkgNp+eTFMUiTry:mr+40F0oFWsg2D3gn
- TLSH T1DD067C5BA2E603ECE176D238CB965903F2B638054731AADB11509E790F77BF14EB9B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_55f4b57fb6d68e73b27c45d1e2a6e2d6_cobalt-strike_coinminer_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_55f4b57fb6d68e73b27c45d1e2a6e2d6_cobalt-strike_coinminer_elex_glassworm_remcos_vidar_wannacry
- Size 3.8MB
- SHA256 839c8a6f0a305aa1c7eb83b5064323c9cafd147ffa3d47997a3267cea64b5f5f
- MD5 55f4b57fb6d68e73b27c45d1e2a6e2d6
- SHA1 dc6cfb3dc55273b80b0ffe9c4ee7fe3309002c3f
- SHA512 fe9d53d83a2403978f5770e7932bf00fc8582c775b6582e0e9a37206d465fac5e94c4fb8832f6c43787ee8835a06781299f51ff0e2897a104d9fa74a0d259be7
- SSDEEP 49152:O7TBh/6gr+48AYs9pavbNmCrhJFNIvOL5Ifn0sP5pP/j5mzV0DkgNp+eTFMUiTry:mr+40F0oFWsg2D3gn
- TLSH T1DD067C5BA2E603ECE176D238CB965903F2B638054731AADB11509E790F77BF14EB9B01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.