General
- Target 2026-09-30_447c87999b3cc3ea7fca5eb30cfd559a_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_vidar_wannacry
- Size 8.7MB
- Sample260930-n22eqssw2j
- SHA256 3945ecac3bb1382bfbac53b3f7d28615d3b769dfb311ce9b7a608d43c7f93998
- MD5 447c87999b3cc3ea7fca5eb30cfd559a
- SHA1 9002110ece8f0b6131d71da1c3054342bcf7259d
- SHA512 d435b4e47af304be4a43b98fdd260bbee002530061a6e464947751c73caaf4f0bdfab1b2ed18ff404693ce5f96727863e4b8a944d13db4c172c3dbfd6346512c
- SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfW1p1zYuraz1qfgIDQSoq2VjnmftS:nIcRGBfW1GBfW1pVG1qfguQSGnms
- TLSH T124967B0273E48075D0F66270857A9635A376BD211B31D7EF66887A2E7E33BC09E35362
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_447c87999b3cc3ea7fca5eb30cfd559a_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_vidar_wannacry.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_447c87999b3cc3ea7fca5eb30cfd559a_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_vidar_wannacry
- Size 8.7MB
- SHA256 3945ecac3bb1382bfbac53b3f7d28615d3b769dfb311ce9b7a608d43c7f93998
- MD5 447c87999b3cc3ea7fca5eb30cfd559a
- SHA1 9002110ece8f0b6131d71da1c3054342bcf7259d
- SHA512 d435b4e47af304be4a43b98fdd260bbee002530061a6e464947751c73caaf4f0bdfab1b2ed18ff404693ce5f96727863e4b8a944d13db4c172c3dbfd6346512c
- SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfW1p1zYuraz1qfgIDQSoq2VjnmftS:nIcRGBfW1GBfW1pVG1qfguQSGnms
- TLSH T124967B0273E48075D0F66270857A9635A376BD211B31D7EF66887A2E7E33BC09E35362
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1