General
- Target 2026-06-27_17dc789cc75a46d65a3b97bd878604f3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 38.3MB
- Sample260629-ln4a3ab19m
- SHA256 9befc6e3972a3cec9bd8a7fa537e152c6729eaeb9a0e16a4832e2ddd12315c5b
- MD5 17dc789cc75a46d65a3b97bd878604f3
- SHA1 a98238e8084e00f534acd48959f0b42d683b2d25
- SHA512 782e8cadb3af9daff39ed3b52e6543bef1daf65aa8bc47e2098a5382aae3d1c474aeff36737ab8e072d775d1d48318e8f167cf8ef705a7b45c663776d901abbf
- SSDEEP 196608:Jw/h1+Qw/h1+gwXw/h1+Qw/h1+gwew/h1+Qw/h1+gwXw/h1+Qw/h1+gwBoK9Gnor:hw3wyw3wBo6Gcw3wyw3wBo6G7
- TLSH T17A979E56F5A481B1D0B2C174C4D6A77AEA327C415B308BCB5346FB2C2E376D19A3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_17dc789cc75a46d65a3b97bd878604f3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_17dc789cc75a46d65a3b97bd878604f3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_17dc789cc75a46d65a3b97bd878604f3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 38.3MB
- SHA256 9befc6e3972a3cec9bd8a7fa537e152c6729eaeb9a0e16a4832e2ddd12315c5b
- MD5 17dc789cc75a46d65a3b97bd878604f3
- SHA1 a98238e8084e00f534acd48959f0b42d683b2d25
- SHA512 782e8cadb3af9daff39ed3b52e6543bef1daf65aa8bc47e2098a5382aae3d1c474aeff36737ab8e072d775d1d48318e8f167cf8ef705a7b45c663776d901abbf
- SSDEEP 196608:Jw/h1+Qw/h1+gwXw/h1+Qw/h1+gwew/h1+Qw/h1+gwXw/h1+Qw/h1+gwBoK9Gnor:hw3wyw3wBo6Gcw3wyw3wBo6G7
- TLSH T17A979E56F5A481B1D0B2C174C4D6A77AEA327C415B308BCB5346FB2C2E376D19A3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry