General
- Target 2026-09-29_3d9c18736061d868d1f92f631b67dbe9_amadey_elex_glassworm_remcos_vidar_wannacry
- Size 3.4MB
- Sample260930-c61s8a1dmd
- SHA256 1c85645f1ff46266cd12a657203a8c5d8d3c53c85c93bf9230cf93d22e5de120
- MD5 3d9c18736061d868d1f92f631b67dbe9
- SHA1 325094daa16c651d8cc5d0cd7064416796a6998d
- SHA512 1c05c3ac6afb836322da1bda6612cea0aa3d48177c0b6ba5472efffcfe59aaa4b9f4b54c1d669634a7314730692a6705d08eb52aa3e3c0ce0c965670a0966697
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatgl9wq6qatglv16Zkk:TID41qW1PszVZjF
- TLSH T12EF58D42B7D548B2E1B71231497752621F76B8150F34D38F2398A66E6F337C0AB367A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_3d9c18736061d868d1f92f631b67dbe9_amadey_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_3d9c18736061d868d1f92f631b67dbe9_amadey_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_3d9c18736061d868d1f92f631b67dbe9_amadey_elex_glassworm_remcos_vidar_wannacry
- Size 3.4MB
- SHA256 1c85645f1ff46266cd12a657203a8c5d8d3c53c85c93bf9230cf93d22e5de120
- MD5 3d9c18736061d868d1f92f631b67dbe9
- SHA1 325094daa16c651d8cc5d0cd7064416796a6998d
- SHA512 1c05c3ac6afb836322da1bda6612cea0aa3d48177c0b6ba5472efffcfe59aaa4b9f4b54c1d669634a7314730692a6705d08eb52aa3e3c0ce0c965670a0966697
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatgl9wq6qatglv16Zkk:TID41qW1PszVZjF
- TLSH T12EF58D42B7D548B2E1B71231497752621F76B8150F34D38F2398A66E6F337C0AB367A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory