General
- Target 2026-04-16_52790d4f038749b0c7f33bf3fa43383c_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 4.8MB
- Sample260416-sdnwyscv3p
- SHA256 83e1522d2625b440f768f3e7c6326d8cf92b26a4f399d3b84356d5f4da6c3d02
- MD5 52790d4f038749b0c7f33bf3fa43383c
- SHA1 4ac7d417a4a87d7c86c58b1bb003d1a6268d16d5
- SHA512 b6f89b5e07eb7a55ad758dbf6b7fc979f0036a1a216e11ea9b9d30d057d551e11461a0babb63fd7120c098110aa48aede44a3e7c7feded37528dacf9db86d347
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHyqatglYqatglnhOwY5fqatgljmpYqQY5G7iw2bqrGdpYqsqL:7ID41qM5ram6m5h6N
- TLSH T1F8364A16B7A486A2D0779175C9A29296FE7238510F3087CF1385A73D2F337D1E93A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-16_52790d4f038749b0c7f33bf3fa43383c_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_52790d4f038749b0c7f33bf3fa43383c_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_52790d4f038749b0c7f33bf3fa43383c_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 4.8MB
- SHA256 83e1522d2625b440f768f3e7c6326d8cf92b26a4f399d3b84356d5f4da6c3d02
- MD5 52790d4f038749b0c7f33bf3fa43383c
- SHA1 4ac7d417a4a87d7c86c58b1bb003d1a6268d16d5
- SHA512 b6f89b5e07eb7a55ad758dbf6b7fc979f0036a1a216e11ea9b9d30d057d551e11461a0babb63fd7120c098110aa48aede44a3e7c7feded37528dacf9db86d347
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHyqatglYqatglnhOwY5fqatgljmpYqQY5G7iw2bqrGdpYqsqL:7ID41qM5ram6m5h6N
- TLSH T1F8364A16B7A486A2D0779175C9A29296FE7238510F3087CF1385A73D2F337D1E93A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory