General
- Target 2026-09-29_eea3c7c5fb6c5f3030b8869412709737_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry
- Size 3.1MB
- Sample260930-snfckaxhld
- SHA256 a5dab0a9fabbda1a275ec49e1189d7a541484f88d37b6f720c1d318b89c244c7
- MD5 eea3c7c5fb6c5f3030b8869412709737
- SHA1 76b7950d87ac6df2f9e7654573a44da0ef94c62b
- SHA512 761e33bba794655863b9117f4b7b5ed4ddcbea50c6affd71d8ae7d77086c10f597d41fb5586786a71c75e908d2ef50c6b2fd72c850813cdb8f5cacf5c75845e0
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatgl9wq6qatgltY5S9:TID41qW1PszVZX5e
- TLSH T1BBE59D42B7D54963E1771232487752A21E72B9210F34E28F2398766D9F337C0AB377A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_eea3c7c5fb6c5f3030b8869412709737_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_eea3c7c5fb6c5f3030b8869412709737_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_eea3c7c5fb6c5f3030b8869412709737_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry
- Size 3.1MB
- SHA256 a5dab0a9fabbda1a275ec49e1189d7a541484f88d37b6f720c1d318b89c244c7
- MD5 eea3c7c5fb6c5f3030b8869412709737
- SHA1 76b7950d87ac6df2f9e7654573a44da0ef94c62b
- SHA512 761e33bba794655863b9117f4b7b5ed4ddcbea50c6affd71d8ae7d77086c10f597d41fb5586786a71c75e908d2ef50c6b2fd72c850813cdb8f5cacf5c75845e0
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatgl9wq6qatgltY5S9:TID41qW1PszVZX5e
- TLSH T1BBE59D42B7D54963E1771232487752A21E72B9210F34E28F2398766D9F337C0AB377A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory