General
- Target 2026-06-27_b5d4744e867b80937e53e2532325c3f4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 19.0MB
- Sample260629-d7lalact6t
- SHA256 f844e1e060b198ff087bfedc85b5870a28722edd4efc5e809bbe2e8b920b1821
- MD5 b5d4744e867b80937e53e2532325c3f4
- SHA1 51e7254e3ef80c88b2ecdd079f21f4bd8101e365
- SHA512 d6c2e689bf54933cfd8160aa8a0e40cd21700639e7d672cf52169b5af1ffd78d873a6daacff9d4dc98ed8004c59fef5fc686f01ea8a0f36c1ee68863f79dbd93
- SSDEEP 196608:l8Vb618U68Vb618US18U9o8Vb6L8Vb618U68Vb618US18U9o8Vb6Y:2cDcy79cDcy7h
- TLSH T138178C17F6A441F5D07AD47486A69236EA727C520B309ACF4390F62D2F336D09F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_b5d4744e867b80937e53e2532325c3f4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_b5d4744e867b80937e53e2532325c3f4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260617-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_b5d4744e867b80937e53e2532325c3f4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 19.0MB
- SHA256 f844e1e060b198ff087bfedc85b5870a28722edd4efc5e809bbe2e8b920b1821
- MD5 b5d4744e867b80937e53e2532325c3f4
- SHA1 51e7254e3ef80c88b2ecdd079f21f4bd8101e365
- SHA512 d6c2e689bf54933cfd8160aa8a0e40cd21700639e7d672cf52169b5af1ffd78d873a6daacff9d4dc98ed8004c59fef5fc686f01ea8a0f36c1ee68863f79dbd93
- SSDEEP 196608:l8Vb618U68Vb618US18U9o8Vb6L8Vb618U68Vb618US18U9o8Vb6Y:2cDcy79cDcy7h
- TLSH T138178C17F6A441F5D07AD47486A69236EA727C520B309ACF4390F62D2F336D09F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry