General
- Target 2026-06-30_f9e5d465645b36ddd6feeaf501906e0e_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 2.6MB
- Sample260701-ce5m4aes3w
- SHA256 439747be478c14f7102617e4a12e4394641b7f5593ba048bceb5d4dc9a142be9
- MD5 f9e5d465645b36ddd6feeaf501906e0e
- SHA1 98de57138b09c6d09edcc17bd3a31eb817fe11ac
- SHA512 1acaa1306d992661ba47a42baeae231eb708e917c5931c8bad4dff3b5e70275a9d3e6be0a0d792985677723b7f7d1a1ef8055851e1fcd190c95a279122ebb7db
- SSDEEP 49152:jYRw5x6M1vYRw5x6M1yJIUb/ezSC6vUzPvMHjy:Uu5x6M1wu5x6M1IezSC6v2XMH
- TLSH T19BD56C16F5B482B3C5B69475C5DAB77AFA3275420B208BC78345CB2C2E232D19D3673A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_f9e5d465645b36ddd6feeaf501906e0e_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_f9e5d465645b36ddd6feeaf501906e0e_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_f9e5d465645b36ddd6feeaf501906e0e_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 2.6MB
- SHA256 439747be478c14f7102617e4a12e4394641b7f5593ba048bceb5d4dc9a142be9
- MD5 f9e5d465645b36ddd6feeaf501906e0e
- SHA1 98de57138b09c6d09edcc17bd3a31eb817fe11ac
- SHA512 1acaa1306d992661ba47a42baeae231eb708e917c5931c8bad4dff3b5e70275a9d3e6be0a0d792985677723b7f7d1a1ef8055851e1fcd190c95a279122ebb7db
- SSDEEP 49152:jYRw5x6M1vYRw5x6M1yJIUb/ezSC6vUzPvMHjy:Uu5x6M1wu5x6M1IezSC6v2XMH
- TLSH T19BD56C16F5B482B3C5B69475C5DAB77AFA3275420B208BC78345CB2C2E232D19D3673A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry