General
- Target 2026-04-15_7655d76df1ee7278ec989b1d9d7709d9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 4.4MB
- Sample260415-s8hnesey7t
- SHA256 e1fc8af332442d3cfdd08149507f2f9f0aa951f638ad55c5ec481b32ac1df655
- MD5 7655d76df1ee7278ec989b1d9d7709d9
- SHA1 1def53d0d678cdd1e5744e969a4cecaa33923ab3
- SHA512 674eb409d829280a890d73c3a516bb0854f58d75b3570a59ea9a0cbeb01a461347f880d2093ede3d7e40437f1ffbedf8bff29af761a690822e142d6ad46c8be5
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglnhOwY5fqatgljmpYqQY5GWF12WTgADeW4Ska:TID41qM5ram6m517hDfkZc
- TLSH T149265A56B7A88762D0778175C4979696FE7278110F2087CF1384EB2C2F337D1AA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_7655d76df1ee7278ec989b1d9d7709d9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_7655d76df1ee7278ec989b1d9d7709d9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_7655d76df1ee7278ec989b1d9d7709d9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 4.4MB
- SHA256 e1fc8af332442d3cfdd08149507f2f9f0aa951f638ad55c5ec481b32ac1df655
- MD5 7655d76df1ee7278ec989b1d9d7709d9
- SHA1 1def53d0d678cdd1e5744e969a4cecaa33923ab3
- SHA512 674eb409d829280a890d73c3a516bb0854f58d75b3570a59ea9a0cbeb01a461347f880d2093ede3d7e40437f1ffbedf8bff29af761a690822e142d6ad46c8be5
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglnhOwY5fqatgljmpYqQY5GWF12WTgADeW4Ska:TID41qM5ram6m517hDfkZc
- TLSH T149265A56B7A88762D0778175C4979696FE7278110F2087CF1384EB2C2F337D1AA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory