General
- Target 2026-05-09_61ab3806d4d03381126e75836185d8a6_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.0MB
- Sample260509-2d5ddady7s
- SHA256 f9022e36d89a715936d71eb572b77871b8d520c975c96d77b21677fc3bc02db9
- MD5 61ab3806d4d03381126e75836185d8a6
- SHA1 10de13d7c698147a82165e542119147e75e4c53a
- SHA512 19b535738ace08550e18c733355e79920e9421dfe63e10cb155846b6e9a53a6b0df70ae7313ce3108692fbfd4f0f4973925957294c44602d7d042767dfa4d147
- SSDEEP 98304:Pe5x6c1/e5x6c1Roq2VjnmSnUm8UMe5x6c1/e5x6c1Roq2VjnmSnUm8Ufb:IkVGn918UvkVGn918Ufb
- TLSH T155C69E06B6A881F4D1AAC67486A68677F772BC054B309BDF4351F61D1E33BD09E3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-09_61ab3806d4d03381126e75836185d8a6_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-09_61ab3806d4d03381126e75836185d8a6_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-09_61ab3806d4d03381126e75836185d8a6_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.0MB
- SHA256 f9022e36d89a715936d71eb572b77871b8d520c975c96d77b21677fc3bc02db9
- MD5 61ab3806d4d03381126e75836185d8a6
- SHA1 10de13d7c698147a82165e542119147e75e4c53a
- SHA512 19b535738ace08550e18c733355e79920e9421dfe63e10cb155846b6e9a53a6b0df70ae7313ce3108692fbfd4f0f4973925957294c44602d7d042767dfa4d147
- SSDEEP 98304:Pe5x6c1/e5x6c1Roq2VjnmSnUm8UMe5x6c1/e5x6c1Roq2VjnmSnUm8Ufb:IkVGn918UvkVGn918Ufb
- TLSH T155C69E06B6A881F4D1AAC67486A68677F772BC054B309BDF4351F61D1E33BD09E3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry