General
- Target 2026-05-05_ac39cae5fb7f9ac90b208e3bee54fa3d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 32.7MB
- Sample260505-hydllsd14k
- SHA256 8d12c0e815802e1b25efc92697f76e85ea428c09c2ce47abd3aee54ff950fe9e
- MD5 ac39cae5fb7f9ac90b208e3bee54fa3d
- SHA1 e7078b37617ab0112b122b03c4220b5f96100293
- SHA512 5a130e65f0dbacdc04467a924c47c579542f666eed4574e5102e8e3da5546b21bb9781615d44d3a0986bb4d6714f83edd9e39e68c8616b85b42aa59018b34d1e
- SSDEEP 393216:0yZ/K0ttYZTiUEtQevvqc2W1cpV2XI32i:0yZ/K0ttYZT9E8c23pV2X+T
- TLSH T100776C52B6E443E2E3A6D53489B582B2EB717C0E1F3193BB1179F21E1E376D06D29321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-05_ac39cae5fb7f9ac90b208e3bee54fa3d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_ac39cae5fb7f9ac90b208e3bee54fa3d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_ac39cae5fb7f9ac90b208e3bee54fa3d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 32.7MB
- SHA256 8d12c0e815802e1b25efc92697f76e85ea428c09c2ce47abd3aee54ff950fe9e
- MD5 ac39cae5fb7f9ac90b208e3bee54fa3d
- SHA1 e7078b37617ab0112b122b03c4220b5f96100293
- SHA512 5a130e65f0dbacdc04467a924c47c579542f666eed4574e5102e8e3da5546b21bb9781615d44d3a0986bb4d6714f83edd9e39e68c8616b85b42aa59018b34d1e
- SSDEEP 393216:0yZ/K0ttYZTiUEtQevvqc2W1cpV2XI32i:0yZ/K0ttYZT9E8c23pV2X+T
- TLSH T100776C52B6E443E2E3A6D53489B582B2EB717C0E1F3193BB1179F21E1E376D06D29321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry