General
- Target 2026-07-01_eab25b7fa8764f3a1905e6b85caee18b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 18.7MB
- Sample260701-tx31naas2j
- SHA256 bcb534ffdd625581c2f8f57e889070719d3a7fb2881170155dd41eef77ff30f4
- MD5 eab25b7fa8764f3a1905e6b85caee18b
- SHA1 69a2d9e83d3436c399f4bdede165da2d1689d8aa
- SHA512 716ac0540b0b2ad525dfc00ab14703f5e410e2aa982d1835700a7268baa71548b6c5d971be0ae49d8231c2659c4937008c7a48d5c76e9409133a2826346106a8
- SSDEEP 196608:Qi8kLri8kL5oKmi8kLri8kL5oKylGn//h1+:IkLDkL5ovkLDkL5o/lG
- TLSH T162179F03B6E441B9E0BBC63496669532EA72BC450B31D7CF5694F61E2E33BD09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_eab25b7fa8764f3a1905e6b85caee18b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_eab25b7fa8764f3a1905e6b85caee18b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_eab25b7fa8764f3a1905e6b85caee18b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 18.7MB
- SHA256 bcb534ffdd625581c2f8f57e889070719d3a7fb2881170155dd41eef77ff30f4
- MD5 eab25b7fa8764f3a1905e6b85caee18b
- SHA1 69a2d9e83d3436c399f4bdede165da2d1689d8aa
- SHA512 716ac0540b0b2ad525dfc00ab14703f5e410e2aa982d1835700a7268baa71548b6c5d971be0ae49d8231c2659c4937008c7a48d5c76e9409133a2826346106a8
- SSDEEP 196608:Qi8kLri8kL5oKmi8kLri8kL5oKylGn//h1+:IkLDkL5ovkLDkL5o/lG
- TLSH T162179F03B6E441B9E0BBC63496669532EA72BC450B31D7CF5694F61E2E33BD09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry