General
- Target 2026-04-19_90cf302f6a9d12980b1c02741b8607b5_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_stop_vidar_wannacry
- Size 5.4MB
- Sample260419-ej7pcsht8t
- SHA256 bb67a6fa6a7cd4d9027654749c1fc595038bda51054b608751078d4e015c52f6
- MD5 90cf302f6a9d12980b1c02741b8607b5
- SHA1 272e709236a926780cd0a6b30bb01efeb9dce1a6
- SHA512 b3b33adf48e906bf55f2d7358a9bbd96e216eb75853c24aceb455300b797a4d8c79cf9be56ac68b8911ac693e0db50448177e313be1dd872294afe1ec7313ec5
- SSDEEP 98304:njBxcO4EYHKbJEYF7ujBxcO4EYHKbJEYF7ujBxcO4EYHKbJEYF7ujBxcO4EYHKbl:njBxcO4qlujBxcO4qlujBxcO4qlujBxv
- TLSH T13C467C26B24150BCD97790B48A8B993AEA30B4560731A9EF5384D9313F77AF16F3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_90cf302f6a9d12980b1c02741b8607b5_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_90cf302f6a9d12980b1c02741b8607b5_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_90cf302f6a9d12980b1c02741b8607b5_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_stop_vidar_wannacry
- Size 5.4MB
- SHA256 bb67a6fa6a7cd4d9027654749c1fc595038bda51054b608751078d4e015c52f6
- MD5 90cf302f6a9d12980b1c02741b8607b5
- SHA1 272e709236a926780cd0a6b30bb01efeb9dce1a6
- SHA512 b3b33adf48e906bf55f2d7358a9bbd96e216eb75853c24aceb455300b797a4d8c79cf9be56ac68b8911ac693e0db50448177e313be1dd872294afe1ec7313ec5
- SSDEEP 98304:njBxcO4EYHKbJEYF7ujBxcO4EYHKbJEYF7ujBxcO4EYHKbJEYF7ujBxcO4EYHKbl:njBxcO4qlujBxcO4qlujBxcO4qlujBxv
- TLSH T13C467C26B24150BCD97790B48A8B993AEA30B4560731A9EF5384D9313F77AF16F3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Drops file in Drivers directory
Adds Run key to start application
Drops file in System32 directory