General
- Target 2026-06-02_eaa89630fd49ce635e9ee62c9ead95dd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 7.6MB
- Sample260602-d698bsc17v
- SHA256 88033aa899177450e6823b76806c066a96ea71a971cd7b736059f1a1cc44518b
- MD5 eaa89630fd49ce635e9ee62c9ead95dd
- SHA1 69826f42dcb708ec39fff6866df177bc74216547
- SHA512 a85a3b6799b4c31e8b58006171c476128ac04c74b1eee434d3c3458cd26b1d7e0ffecbd8585cacd6c67e49bc6ed96e7713d8a53695d376dd19f9bbb3bc79bfdf
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nUm8S+YPppCpU2hRjo:l8Vb618L8Vb618i2VhVo
- TLSH T119869D17F6A540F5D06AC47486969232EA72BC560B31A7CF0390F7692F33AD05F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_eaa89630fd49ce635e9ee62c9ead95dd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_eaa89630fd49ce635e9ee62c9ead95dd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_eaa89630fd49ce635e9ee62c9ead95dd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 7.6MB
- SHA256 88033aa899177450e6823b76806c066a96ea71a971cd7b736059f1a1cc44518b
- MD5 eaa89630fd49ce635e9ee62c9ead95dd
- SHA1 69826f42dcb708ec39fff6866df177bc74216547
- SHA512 a85a3b6799b4c31e8b58006171c476128ac04c74b1eee434d3c3458cd26b1d7e0ffecbd8585cacd6c67e49bc6ed96e7713d8a53695d376dd19f9bbb3bc79bfdf
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nUm8S+YPppCpU2hRjo:l8Vb618L8Vb618i2VhVo
- TLSH T119869D17F6A540F5D06AC47486969232EA72BC560B31A7CF0390F7692F33AD05F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry