General
- Target 2026-06-27_8049040bc87abae134a2dee67f11de60_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 7.1MB
- Sample260629-gcefcafv9m
- SHA256 c47fe2ab3fac38a84615887d25dc25b27482527b3f2d4c24ac91e2e7984ab51a
- MD5 8049040bc87abae134a2dee67f11de60
- SHA1 d2022b01cb43ca5f2bd1cce19e13836152230389
- SHA512 d19aca8dbef0c607ee4277d36ab581d12c4181cd2e4b4eb1469ea1d259d405f6d7ee617d75e02897120924a4f5a421f2fa7f11147ece7948df761aba74018bd3
- SSDEEP 98304:Uu5x6M1Poq2Vjnm4u5x6M1wu5x6M1Poq2VjnmWC/h1+:nDGnuPDGn/C/h1+
- TLSH T149768D06B6A881B5D1F6C67485A6C677F73278054B309BEF4355CA1E2E33AD09E3A331
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_8049040bc87abae134a2dee67f11de60_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_8049040bc87abae134a2dee67f11de60_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_8049040bc87abae134a2dee67f11de60_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 7.1MB
- SHA256 c47fe2ab3fac38a84615887d25dc25b27482527b3f2d4c24ac91e2e7984ab51a
- MD5 8049040bc87abae134a2dee67f11de60
- SHA1 d2022b01cb43ca5f2bd1cce19e13836152230389
- SHA512 d19aca8dbef0c607ee4277d36ab581d12c4181cd2e4b4eb1469ea1d259d405f6d7ee617d75e02897120924a4f5a421f2fa7f11147ece7948df761aba74018bd3
- SSDEEP 98304:Uu5x6M1Poq2Vjnm4u5x6M1wu5x6M1Poq2VjnmWC/h1+:nDGnuPDGn/C/h1+
- TLSH T149768D06B6A881B5D1F6C67485A6C677F73278054B309BEF4355CA1E2E33AD09E3A331
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry