General
- Target 2026-10-22_abc1ffca55190104b832bde709b8cb22_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry
- Size 4.4MB
- Sample261024-bcwfzaey91
- SHA256 171f1b7c9d62c43f7bb44086424f5305c138b3eb0b38ec4ab3e4e6abd2efdf46
- MD5 abc1ffca55190104b832bde709b8cb22
- SHA1 8818ec46d0be6d62420848b0cf2c17c9cd53737e
- SHA512 ca9b25da60a0b8fe6bf6675cb414b4e1d95f5f6d76ac05a33d4e7dd86ba2b13af1ea1d5d2d37d370a7b23ee460ab7459c2ba89cd2b7b8bcbc544901b4cfcf3c1
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatglly6i1zuajsauZnJPY5mqN:TID41qW1PszV+tA5mkfkZc
- TLSH T17C266B16F7A88272E0739175C5A7A6A6FE7234111B3086CF1344A77C2F337D19A3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_abc1ffca55190104b832bde709b8cb22_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_abc1ffca55190104b832bde709b8cb22_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_abc1ffca55190104b832bde709b8cb22_amadey_cobalt-strike_elex_glassworm_hijackloader_remcos_vidar_wannacry
- Size 4.4MB
- SHA256 171f1b7c9d62c43f7bb44086424f5305c138b3eb0b38ec4ab3e4e6abd2efdf46
- MD5 abc1ffca55190104b832bde709b8cb22
- SHA1 8818ec46d0be6d62420848b0cf2c17c9cd53737e
- SHA512 ca9b25da60a0b8fe6bf6675cb414b4e1d95f5f6d76ac05a33d4e7dd86ba2b13af1ea1d5d2d37d370a7b23ee460ab7459c2ba89cd2b7b8bcbc544901b4cfcf3c1
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatglly6i1zuajsauZnJPY5mqN:TID41qW1PszV+tA5mkfkZc
- TLSH T17C266B16F7A88272E0739175C5A7A6A6FE7234111B3086CF1344A77C2F337D19A3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory