General
- Target 2026-04-16_826a1877b8a74f0e55f344395faeb4ba_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.1MB
- Sample260416-bs4saagy8t
- SHA256 f9573f5c2e59f78d7349e3493c55d965152c8645d083dd574c9953fa5c638bf8
- MD5 826a1877b8a74f0e55f344395faeb4ba
- SHA1 e738e726d66ac8a0ee797308fb8a4eea5f0b564d
- SHA512 82ef2574f808cc8bd335c7e64e59fbbe83637ddacacaa925971fed20cc9c0d3114fc7436143d993797cc85b3d2c8f1b02ae97ab52673f3356d5e80af30ec700f
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2Vjnm3joTCz:IkQkjGnOoWz
- TLSH T1D0869D06B6A481F5D2A6C53485B69777F671B8050B30DBDB8364CB2D2E337D19E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-16_826a1877b8a74f0e55f344395faeb4ba_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_826a1877b8a74f0e55f344395faeb4ba_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_826a1877b8a74f0e55f344395faeb4ba_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.1MB
- SHA256 f9573f5c2e59f78d7349e3493c55d965152c8645d083dd574c9953fa5c638bf8
- MD5 826a1877b8a74f0e55f344395faeb4ba
- SHA1 e738e726d66ac8a0ee797308fb8a4eea5f0b564d
- SHA512 82ef2574f808cc8bd335c7e64e59fbbe83637ddacacaa925971fed20cc9c0d3114fc7436143d993797cc85b3d2c8f1b02ae97ab52673f3356d5e80af30ec700f
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2Vjnm3joTCz:IkQkjGnOoWz
- TLSH T1D0869D06B6A481F5D2A6C53485B69777F671B8050B30DBDB8364CB2D2E337D19E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry