General
- Target 2026-06-30_4c29dc587d21bb0f34d6e507c9b2d6b9_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 14.8MB
- Sample260701-frk11agy3w
- SHA256 3a95739660219c8b5f3c725ba5dbcc29e3b6647b451523d63ef9c37ad793ecea
- MD5 4c29dc587d21bb0f34d6e507c9b2d6b9
- SHA1 a815cc6df448a0a23729bb47232bf54f891ce42a
- SHA512 2cdfd0190d2e7090eccf1f56a83aa992364586f309940029011e5de09f681682fcad735ec65fa153bc937f8b1376c3809dfbc46687dd81e4cec0d48c5e8a9e28
- SSDEEP 196608:l8Vb618U68Vbb8Vb61898Vb618U68Vbb8Vb6186C/h1+:2cD2clcD2c3
- TLSH T16FF69E17F6A444F5D17A983486A69332EB72BC110B3197CF8364E6191F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_4c29dc587d21bb0f34d6e507c9b2d6b9_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_4c29dc587d21bb0f34d6e507c9b2d6b9_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_4c29dc587d21bb0f34d6e507c9b2d6b9_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 14.8MB
- SHA256 3a95739660219c8b5f3c725ba5dbcc29e3b6647b451523d63ef9c37ad793ecea
- MD5 4c29dc587d21bb0f34d6e507c9b2d6b9
- SHA1 a815cc6df448a0a23729bb47232bf54f891ce42a
- SHA512 2cdfd0190d2e7090eccf1f56a83aa992364586f309940029011e5de09f681682fcad735ec65fa153bc937f8b1376c3809dfbc46687dd81e4cec0d48c5e8a9e28
- SSDEEP 196608:l8Vb618U68Vbb8Vb61898Vb618U68Vbb8Vb6186C/h1+:2cD2clcD2c3
- TLSH T16FF69E17F6A444F5D17A983486A69332EB72BC110B3197CF8364E6191F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry