General
- Target 2026-06-27_47d3990021df8744a21fc9c7bd85ffe3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 21.8MB
- Sample260629-jndpasgv3v
- SHA256 4c3ec3df31434c079e0f2e442959466b95fdcdcfeaa7e47ce5ac3f3e6f5a4772
- MD5 47d3990021df8744a21fc9c7bd85ffe3
- SHA1 69bf89af51a74ffdc760777d79d735b3690dd5bf
- SHA512 f79dccf5cf3d809c306b4f0eca36f3584430b70a526c4b085d7d7a9a44d9ab4a6c36ffacae046e7b81f03a32bdb7d0174ed27e23ca9ab7fdd5c284ee4d79fdee
- SSDEEP 196608:l8Vb618L8Vb618D/h1+E8Vb618L8Vb618D/h1+joKH8Vb618L8Vb618D/h1+FvyF:2c7cxc7cXobc7c5vyEYKb
- TLSH T160377C16F6A440F5D07AD474C6A69636FA737C120B309BCB4394E62D2F336D09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_47d3990021df8744a21fc9c7bd85ffe3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_47d3990021df8744a21fc9c7bd85ffe3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_47d3990021df8744a21fc9c7bd85ffe3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 21.8MB
- SHA256 4c3ec3df31434c079e0f2e442959466b95fdcdcfeaa7e47ce5ac3f3e6f5a4772
- MD5 47d3990021df8744a21fc9c7bd85ffe3
- SHA1 69bf89af51a74ffdc760777d79d735b3690dd5bf
- SHA512 f79dccf5cf3d809c306b4f0eca36f3584430b70a526c4b085d7d7a9a44d9ab4a6c36ffacae046e7b81f03a32bdb7d0174ed27e23ca9ab7fdd5c284ee4d79fdee
- SSDEEP 196608:l8Vb618L8Vb618D/h1+E8Vb618L8Vb618D/h1+joKH8Vb618L8Vb618D/h1+FvyF:2c7cxc7cXobc7c5vyEYKb
- TLSH T160377C16F6A440F5D07AD474C6A69636FA737C120B309BCB4394E62D2F336D09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry