General
- Target 2026-06-02_0c94efc9748820e4da36e2300e587851_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.0MB
- Sample260602-a7ftbsbv9q
- SHA256 57111892ff3f31bdb2bbd318a31a3184c5f650992ce2e7f8cdabdc5f7a272d4c
- MD5 0c94efc9748820e4da36e2300e587851
- SHA1 96621ea1f4621611c392d1b719921776c8320aa7
- SHA512 a9135ae7ef0cf57def3a935006936d237c9b2f2452ef40212b400b0206ca17613d6238eacccc10e34c8c31dbf5e1a5f0426aca3613fa83300259c73c9ca2adca
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCJo:2cDcKcDcOG
- TLSH T1BFC67C17F69444F5D16E94348AA69236EA73BC120B7097CB43A0F62D2F336D05F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_0c94efc9748820e4da36e2300e587851_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_0c94efc9748820e4da36e2300e587851_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_0c94efc9748820e4da36e2300e587851_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.0MB
- SHA256 57111892ff3f31bdb2bbd318a31a3184c5f650992ce2e7f8cdabdc5f7a272d4c
- MD5 0c94efc9748820e4da36e2300e587851
- SHA1 96621ea1f4621611c392d1b719921776c8320aa7
- SHA512 a9135ae7ef0cf57def3a935006936d237c9b2f2452ef40212b400b0206ca17613d6238eacccc10e34c8c31dbf5e1a5f0426aca3613fa83300259c73c9ca2adca
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCJo:2cDcKcDcOG
- TLSH T1BFC67C17F69444F5D16E94348AA69236EA73BC120B7097CB43A0F62D2F336D05F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry