General
- Target 2026-06-25_8d31e1b5bb903cc16eaf09009762c7f5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.0MB
- Sample260629-zzeczagv6r
- SHA256 65e09fcc6b84cad83c37a2e5bae9e30105a27a27f82b8afe033fd32d106e5d6f
- MD5 8d31e1b5bb903cc16eaf09009762c7f5
- SHA1 45b6bab7617ad3afdc0d541409fe0073d90ad50f
- SHA512 a641fdf697d668f5c80b41e0e02b7f879e7eb17d5a9c5b88be4ab5833d749935f22170be6339afef2f6d3bc63479b9e6999cf33da4ec1d7353c462ef625a285e
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxGu5x6M1pLapIkoq2Vjnmx+j:JtcIkGnkdtcIkGnk+j
- TLSH T105B65C2676E440A5C1A9C134CF568732E3B17C298FF197EBA115B2CD2E336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_8d31e1b5bb903cc16eaf09009762c7f5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_8d31e1b5bb903cc16eaf09009762c7f5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_8d31e1b5bb903cc16eaf09009762c7f5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.0MB
- SHA256 65e09fcc6b84cad83c37a2e5bae9e30105a27a27f82b8afe033fd32d106e5d6f
- MD5 8d31e1b5bb903cc16eaf09009762c7f5
- SHA1 45b6bab7617ad3afdc0d541409fe0073d90ad50f
- SHA512 a641fdf697d668f5c80b41e0e02b7f879e7eb17d5a9c5b88be4ab5833d749935f22170be6339afef2f6d3bc63479b9e6999cf33da4ec1d7353c462ef625a285e
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxGu5x6M1pLapIkoq2Vjnmx+j:JtcIkGnkdtcIkGnk+j
- TLSH T105B65C2676E440A5C1A9C134CF568732E3B17C298FF197EBA115B2CD2E336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry