General
- Target 2026-06-26_ed7a86186c02dc052637fd11086b0480_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 31.3MB
- Sample260629-nc52madx2j
- SHA256 dfae8e44d1c68f7fcdf0bd88ca8fc7cd90db6cececa69cd817a4f4ccfe26c15e
- MD5 ed7a86186c02dc052637fd11086b0480
- SHA1 7f24c85f52df1f660eb5b1c7226c1bf12864da71
- SHA512 b69fd6f9351ea7e832f0adeb957d96c3f0196dc3ba189e86b8eb635a23a34ae2adad3626dc69eff2914d013cf1133792d4efb4be55d1de5b94ddf8673316f739
- SSDEEP 196608:l8Vb618U68Vb618US18U9o8Vb618U68Vb618US18U9B88Vb618U68Vb618US18Ur:2cDcy7cDcyRcDcy7cDcyQ
- TLSH T17C778C16F6A841F5D07AD474C6969676EA727C420B309ACF0390F72D2E33AD09F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_ed7a86186c02dc052637fd11086b0480_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_ed7a86186c02dc052637fd11086b0480_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_ed7a86186c02dc052637fd11086b0480_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 31.3MB
- SHA256 dfae8e44d1c68f7fcdf0bd88ca8fc7cd90db6cececa69cd817a4f4ccfe26c15e
- MD5 ed7a86186c02dc052637fd11086b0480
- SHA1 7f24c85f52df1f660eb5b1c7226c1bf12864da71
- SHA512 b69fd6f9351ea7e832f0adeb957d96c3f0196dc3ba189e86b8eb635a23a34ae2adad3626dc69eff2914d013cf1133792d4efb4be55d1de5b94ddf8673316f739
- SSDEEP 196608:l8Vb618U68Vb618US18U9o8Vb618U68Vb618US18U9B88Vb618U68Vb618US18Ur:2cDcy7cDcyRcDcy7cDcyQ
- TLSH T17C778C16F6A841F5D07AD474C6969676EA727C420B309ACF0390F72D2E33AD09F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application