General
- Target 2026-06-02_53bcbb9df3aaffc01743bd1d8888b795_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_stealc_vidar
- Size 15.5MB
- Sample260602-by7fcsax4t
- SHA256 7cab12dec9117b64689928d8c2b221b44539d4bed353d01afd4db589385ae51c
- MD5 53bcbb9df3aaffc01743bd1d8888b795
- SHA1 5678f831b93c88c2c59d6e64b5a4724588f91849
- SHA512 89ac78e99827310233caaa77844879dec98f81b370651926cbcfbd11bb9f1f0c0af2c62136eea3ae06230e38d2b33d55bf735feb1a39b4ebeda1047daf6bb65e
- SSDEEP 196608:aNwe7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTouh:5eahvQHrc8u3xXJ/f4uUWHG
- TLSH T114F69D17B35681E6C02AE2B886474323E7B9BC440330A7DB16D5BB692F77BE4573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-06-02_53bcbb9df3aaffc01743bd1d8888b795_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_53bcbb9df3aaffc01743bd1d8888b795_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_53bcbb9df3aaffc01743bd1d8888b795_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_stealc_vidar
- Size 15.5MB
- SHA256 7cab12dec9117b64689928d8c2b221b44539d4bed353d01afd4db589385ae51c
- MD5 53bcbb9df3aaffc01743bd1d8888b795
- SHA1 5678f831b93c88c2c59d6e64b5a4724588f91849
- SHA512 89ac78e99827310233caaa77844879dec98f81b370651926cbcfbd11bb9f1f0c0af2c62136eea3ae06230e38d2b33d55bf735feb1a39b4ebeda1047daf6bb65e
- SSDEEP 196608:aNwe7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTouh:5eahvQHrc8u3xXJ/f4uUWHG
- TLSH T114F69D17B35681E6C02AE2B886474323E7B9BC440330A7DB16D5BB692F77BE4573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Detects executables packed with SmartAssembly
-
Detects executables packed with Yano Obfuscator
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.