General
- Target 2026-06-28_619ccf04b3e85524e6dfb9947d01b34d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 8.5MB
- Sample260628-14cklsf14m
- SHA256 e37c2a3c1e238c9d54d0a991f2b4cefcb853923703b5eae7e9b4221de07365ea
- MD5 619ccf04b3e85524e6dfb9947d01b34d
- SHA1 fda53bf2ccf86e5219b377d7cb8cbc65057a9ec0
- SHA512 9ed862552e1268c012c45c41702e64df8d404d8f006ec9cbe18609e26f41c65f779b3c6066d5d0c49b4c459bfddfe0a9c0da2a13e13ba0c25f8b244a079c2fa1
- SSDEEP 98304:Su5x6M1Y0oAaldmdmnpp/h1+nu5x6M1Y0oAaldmdmnpp/h1+4:JhKmd0L/h1+QhKmd0L/h1+4
- TLSH T120966A13B19484E5D166C074CE86D235EB327C494BF196EB3281BAD93E37AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_619ccf04b3e85524e6dfb9947d01b34d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_619ccf04b3e85524e6dfb9947d01b34d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_619ccf04b3e85524e6dfb9947d01b34d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 8.5MB
- SHA256 e37c2a3c1e238c9d54d0a991f2b4cefcb853923703b5eae7e9b4221de07365ea
- MD5 619ccf04b3e85524e6dfb9947d01b34d
- SHA1 fda53bf2ccf86e5219b377d7cb8cbc65057a9ec0
- SHA512 9ed862552e1268c012c45c41702e64df8d404d8f006ec9cbe18609e26f41c65f779b3c6066d5d0c49b4c459bfddfe0a9c0da2a13e13ba0c25f8b244a079c2fa1
- SSDEEP 98304:Su5x6M1Y0oAaldmdmnpp/h1+nu5x6M1Y0oAaldmdmnpp/h1+4:JhKmd0L/h1+QhKmd0L/h1+4
- TLSH T120966A13B19484E5D166C074CE86D235EB327C494BF196EB3281BAD93E37AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry