General
- Target 2026-09-29_3cc0da9dd4715d354cf91fbc269e5375_amadey_elex_glassworm_remcos_vidar_wannacry
- Size 4.5MB
- Sample260930-c9bcqs1flc
- SHA256 ff642ffa44a82c40cce0d896ff6f4dc626ad49b95608d6c952979847bfe2607d
- MD5 3cc0da9dd4715d354cf91fbc269e5375
- SHA1 4bcddbdecee88f515191211c56127dd427e81f9e
- SHA512 bfc93fd33d8ef6f16ce52dae471248007b0d3f93d5d96a66f43f883b8ced9b4bf0d515b0bebccff19ee18bdcbbeb47f39a83e526055adf5eb2da9a49ea8c2809
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatgl9wq6qatglvMy6i1zuajsu:TID41qW1PszVZbt8fkZc
- TLSH T163268D12B7F88663E0B34136C5A75696AE7278111B30D6CF2384937D6F337C09A36B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_3cc0da9dd4715d354cf91fbc269e5375_amadey_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_3cc0da9dd4715d354cf91fbc269e5375_amadey_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_3cc0da9dd4715d354cf91fbc269e5375_amadey_elex_glassworm_remcos_vidar_wannacry
- Size 4.5MB
- SHA256 ff642ffa44a82c40cce0d896ff6f4dc626ad49b95608d6c952979847bfe2607d
- MD5 3cc0da9dd4715d354cf91fbc269e5375
- SHA1 4bcddbdecee88f515191211c56127dd427e81f9e
- SHA512 bfc93fd33d8ef6f16ce52dae471248007b0d3f93d5d96a66f43f883b8ced9b4bf0d515b0bebccff19ee18bdcbbeb47f39a83e526055adf5eb2da9a49ea8c2809
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatgl9wq6qatglvMy6i1zuajsu:TID41qW1PszVZbt8fkZc
- TLSH T163268D12B7F88663E0B34136C5A75696AE7278111B30D6CF2384937D6F337C09A36B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory