General
- Target 2026-06-02_fc4cc054c35c80b1f3237937135a9717_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.0MB
- Sample260602-c3asmadt4q
- SHA256 92da86257627e9006f5c3654df13afdae5682c42be938f320e1028b674d855a9
- MD5 fc4cc054c35c80b1f3237937135a9717
- SHA1 d9375cd2d38304d3606ec626c0f9181399a19876
- SHA512 5a6dbbb41ab900bec506cd84c7743cef07ac3d706a93dba6125fda9282284aa320d95bc88a902d603fc623fdc3ff24828ad1b597979ed4ee1d628a893a8f4497
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbfFiV+XenmE3/zwgjI45TMwwT:Su5x6M1pLapIkoq2VjnmBLT
- TLSH T106366C2672E440A5C199C134CF568632E3F17C298FF097FB6255B6C92E33AD07A3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_fc4cc054c35c80b1f3237937135a9717_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_fc4cc054c35c80b1f3237937135a9717_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_fc4cc054c35c80b1f3237937135a9717_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.0MB
- SHA256 92da86257627e9006f5c3654df13afdae5682c42be938f320e1028b674d855a9
- MD5 fc4cc054c35c80b1f3237937135a9717
- SHA1 d9375cd2d38304d3606ec626c0f9181399a19876
- SHA512 5a6dbbb41ab900bec506cd84c7743cef07ac3d706a93dba6125fda9282284aa320d95bc88a902d603fc623fdc3ff24828ad1b597979ed4ee1d628a893a8f4497
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbfFiV+XenmE3/zwgjI45TMwwT:Su5x6M1pLapIkoq2VjnmBLT
- TLSH T106366C2672E440A5C199C134CF568632E3F17C298FF097FB6255B6C92E33AD07A3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry