General
- Target 2026-10-11_95a11460c922065994fd2f71f77b4e81_amadey_cobalt-strike_elex_glassworm_remcos_vidar_wannacry
- Size 3.0MB
- Sample261012-s2ctlaea49
- SHA256 e256b4de9a55c08e2f4bb1c4fcabeb4b5c18252b97daf067161fc42ba2d8aa0c
- MD5 95a11460c922065994fd2f71f77b4e81
- SHA1 865574bab4baa10bafb70c89496387326329d036
- SHA512 f4cbfc584f188563c79eb3e1a480e42e30fca06f7bbf9ea1f14e5dc51b4e17a05f801922cbcdffd7769b9b8a7a224734dba7d05e37b5254c20e6f26fe57d84c3
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatglly6i1zuajsauZnJLwj:TID41qW1PszV+t8j
- TLSH T139E59D02B7D540B2E1771231857752A2AB72B8211F31D6CF2394967D6F33BC0AB36B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_95a11460c922065994fd2f71f77b4e81_amadey_cobalt-strike_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_95a11460c922065994fd2f71f77b4e81_amadey_cobalt-strike_elex_glassworm_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_95a11460c922065994fd2f71f77b4e81_amadey_cobalt-strike_elex_glassworm_remcos_vidar_wannacry
- Size 3.0MB
- SHA256 e256b4de9a55c08e2f4bb1c4fcabeb4b5c18252b97daf067161fc42ba2d8aa0c
- MD5 95a11460c922065994fd2f71f77b4e81
- SHA1 865574bab4baa10bafb70c89496387326329d036
- SHA512 f4cbfc584f188563c79eb3e1a480e42e30fca06f7bbf9ea1f14e5dc51b4e17a05f801922cbcdffd7769b9b8a7a224734dba7d05e37b5254c20e6f26fe57d84c3
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatglly6i1zuajsauZnJLwj:TID41qW1PszV+t8j
- TLSH T139E59D02B7D540B2E1771231857752A2AB72B8211F31D6CF2394967D6F33BC0AB36B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory