General
- Target 2026-10-03_f46de9654d75cc315bc37808e49b7127_amadey_cobalt-strike_elex_glassworm_remcos_vidar_wannacry
- Size 3.1MB
- Sample261003-3erpcaygnd
- SHA256 d24c0d032042dcf6a3f36aba8092bf9a43df2ad164fb8eff0defaca487ad2252
- MD5 f46de9654d75cc315bc37808e49b7127
- SHA1 bbb16fcaf6d1122d60f3d98970125dee46b2df9a
- SHA512 684656b3e5e0f4b5319da2fa0cd35c6ab038def3af43af698b8392ca9aebc35944b1d450d71ac9c123a25e59a2d561734f1c9f668ed461224fd4df8136c3c179
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluwqjXpMC5IhOXpYq:TID41F5IW6
- TLSH T121E57D55B7F44972E1B3427589B292925E327C211F34D3CF2394A27D6E337C0AA36B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-03_f46de9654d75cc315bc37808e49b7127_amadey_cobalt-strike_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-03_f46de9654d75cc315bc37808e49b7127_amadey_cobalt-strike_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-03_f46de9654d75cc315bc37808e49b7127_amadey_cobalt-strike_elex_glassworm_remcos_vidar_wannacry
- Size 3.1MB
- SHA256 d24c0d032042dcf6a3f36aba8092bf9a43df2ad164fb8eff0defaca487ad2252
- MD5 f46de9654d75cc315bc37808e49b7127
- SHA1 bbb16fcaf6d1122d60f3d98970125dee46b2df9a
- SHA512 684656b3e5e0f4b5319da2fa0cd35c6ab038def3af43af698b8392ca9aebc35944b1d450d71ac9c123a25e59a2d561734f1c9f668ed461224fd4df8136c3c179
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluwqjXpMC5IhOXpYq:TID41F5IW6
- TLSH T121E57D55B7F44972E1B3427589B292925E327C211F34D3CF2394A27D6E337C0AA36B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory