General
- Target 2026-10-02_ee196baa5814bb779ec42ab4fd53c6fb_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry
- Size 2.5MB
- Sample261002-22rgesvdmb
- SHA256 4d81d67c6b8465971ab9517ff279df4b61e88f43d9d0d2841d127ae16401c738
- MD5 ee196baa5814bb779ec42ab4fd53c6fb
- SHA1 e786b256b06d4ada5c17984170da53bf0905667b
- SHA512 83558cba310a0c23cad2cb709fc70c69e0ca85d5381c39ddf5a1be454e64cffd10b1c8d7435407c38caa4aa41f97e754760c87d64ce6aebe0ecaa78915f22ecf
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatglL3sv56rX:7ID41qW1PszVOrX
- TLSH T1BEC57C42B7858A72E16B1231486752A22B777C111F3197CF23987E6E6F337C0AA3175B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_ee196baa5814bb779ec42ab4fd53c6fb_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_ee196baa5814bb779ec42ab4fd53c6fb_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_ee196baa5814bb779ec42ab4fd53c6fb_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry
- Size 2.5MB
- SHA256 4d81d67c6b8465971ab9517ff279df4b61e88f43d9d0d2841d127ae16401c738
- MD5 ee196baa5814bb779ec42ab4fd53c6fb
- SHA1 e786b256b06d4ada5c17984170da53bf0905667b
- SHA512 83558cba310a0c23cad2cb709fc70c69e0ca85d5381c39ddf5a1be454e64cffd10b1c8d7435407c38caa4aa41f97e754760c87d64ce6aebe0ecaa78915f22ecf
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatglL3sv56rX:7ID41qW1PszVOrX
- TLSH T1BEC57C42B7858A72E16B1231486752A22B777C111F3197CF23987E6E6F337C0AA3175B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory