General
- Target 2026-06-01_0584216054c079332b62b5017a15e02c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.4MB
- Sample260601-nlbjdab14m
- SHA256 dc3bbaae36db2965637739d9b671aca48e37dfa6dd0f4a166d630a8b2e19fe5b
- MD5 0584216054c079332b62b5017a15e02c
- SHA1 1417f88557cd2eee017d307a58158ee342aceb1a
- SHA512 d889101c16fe382ef921f205f88e7487b8bd11cd15860cb58bf1509849e85e93285fe96430eb4bc61b588efdf4321a27c4424498f3f537fde2866a22dd31d994
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UC:2cDcKcDcO
- TLSH T1B3C67B17E69444F5D16E99308B658232EA73BC120B7197CB43A0F62D2F336D06F7A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_0584216054c079332b62b5017a15e02c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_0584216054c079332b62b5017a15e02c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_0584216054c079332b62b5017a15e02c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.4MB
- SHA256 dc3bbaae36db2965637739d9b671aca48e37dfa6dd0f4a166d630a8b2e19fe5b
- MD5 0584216054c079332b62b5017a15e02c
- SHA1 1417f88557cd2eee017d307a58158ee342aceb1a
- SHA512 d889101c16fe382ef921f205f88e7487b8bd11cd15860cb58bf1509849e85e93285fe96430eb4bc61b588efdf4321a27c4424498f3f537fde2866a22dd31d994
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UC:2cDcKcDcO
- TLSH T1B3C67B17E69444F5D16E99308B658232EA73BC120B7197CB43A0F62D2F336D06F7A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry