General
- Target 2026-06-30_d6a7dffc46a255dd8f99fc3b6304ea61_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 13.6MB
- Sample260701-c2e1yscy8j
- SHA256 178114ba8daee5375fd4bfad18cbfba1c47bc5e3fc7386e3a3fee535d19b1bb7
- MD5 d6a7dffc46a255dd8f99fc3b6304ea61
- SHA1 bbbf2febce00be62c1a709345d7a491968fa9f07
- SHA512 52cf257f672949d90df883b4e424255946eeaca8bbca17c9d0ee9ddb5e1c8c422b77ff05b5e31a8608c30e56b4711250ec2e6edf246397ab03e6766b2a563697
- SSDEEP 196608:l8Vb618U68Vbb8Vb618N8Vb618U68Vbb8Vb618:2cD2cpcD2c
- TLSH T186E69D17F69444F5D17A99308AA69332EB72BC120B3197CB43A4F6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_d6a7dffc46a255dd8f99fc3b6304ea61_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_d6a7dffc46a255dd8f99fc3b6304ea61_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_d6a7dffc46a255dd8f99fc3b6304ea61_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 13.6MB
- SHA256 178114ba8daee5375fd4bfad18cbfba1c47bc5e3fc7386e3a3fee535d19b1bb7
- MD5 d6a7dffc46a255dd8f99fc3b6304ea61
- SHA1 bbbf2febce00be62c1a709345d7a491968fa9f07
- SHA512 52cf257f672949d90df883b4e424255946eeaca8bbca17c9d0ee9ddb5e1c8c422b77ff05b5e31a8608c30e56b4711250ec2e6edf246397ab03e6766b2a563697
- SSDEEP 196608:l8Vb618U68Vbb8Vb618N8Vb618U68Vbb8Vb618:2cD2cpcD2c
- TLSH T186E69D17F69444F5D17A99308AA69332EB72BC120B3197CB43A4F6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry