General
- Target 2026-10-01_223d37a6242802161da5e2f549ad9647_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry
- Size 2.7MB
- Sample261002-w2awsaxs2n
- SHA256 c5b12b9b62b404dd781d2f74f391d9bc509f8b7e9189ff4a54dd7688930a1c56
- MD5 223d37a6242802161da5e2f549ad9647
- SHA1 825c78bbe82b59b74a5a82f2f716a2aeb7fc66e4
- SHA512 3bc2abd963a57e9e255755ab843543066cf78f5fed8f1ce9b2412a287ad83ce023edc2ccf95d31c04f876c37ada7a2686d6bebceac060adaba83ad13600e8e3a
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglmlXpChO9XqatglP56rrhO:TID41KqLrr
- TLSH T1A3D55C4677D58AB6E46B0231886742925B73BC211F2193DF2390B67DAE337C0BA31B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_223d37a6242802161da5e2f549ad9647_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_223d37a6242802161da5e2f549ad9647_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_223d37a6242802161da5e2f549ad9647_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry
- Size 2.7MB
- SHA256 c5b12b9b62b404dd781d2f74f391d9bc509f8b7e9189ff4a54dd7688930a1c56
- MD5 223d37a6242802161da5e2f549ad9647
- SHA1 825c78bbe82b59b74a5a82f2f716a2aeb7fc66e4
- SHA512 3bc2abd963a57e9e255755ab843543066cf78f5fed8f1ce9b2412a287ad83ce023edc2ccf95d31c04f876c37ada7a2686d6bebceac060adaba83ad13600e8e3a
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglmlXpChO9XqatglP56rrhO:TID41KqLrr
- TLSH T1A3D55C4677D58AB6E46B0231886742925B73BC211F2193DF2390B67DAE337C0BA31B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory