General
- Target 2026-07-01_5b5b85b65432c357269723202c1de39d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.9MB
- Sample260701-vm97nacw2s
- SHA256 90b25c9a80f67aac86cf55ca9fc6999ad5a641dd14aa9eb96b53353ed785e951
- MD5 5b5b85b65432c357269723202c1de39d
- SHA1 211225690bf73a2f0c258404f2f17c3616827516
- SHA512 7c75eb0da1666e6e685592ab50d62119b6b5178de69c7ccbf559aa3680d232a5b169bb12df29270193afde1b89ef770250fae65a7985d0fcb8fa4818fccdfb08
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+wj:2cD2cDWj
- TLSH T157B67C12F6E440B5E1BB99708AA69636EA327C520B31CBCF5354F61D1E336D09E36732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_5b5b85b65432c357269723202c1de39d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_5b5b85b65432c357269723202c1de39d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_5b5b85b65432c357269723202c1de39d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.9MB
- SHA256 90b25c9a80f67aac86cf55ca9fc6999ad5a641dd14aa9eb96b53353ed785e951
- MD5 5b5b85b65432c357269723202c1de39d
- SHA1 211225690bf73a2f0c258404f2f17c3616827516
- SHA512 7c75eb0da1666e6e685592ab50d62119b6b5178de69c7ccbf559aa3680d232a5b169bb12df29270193afde1b89ef770250fae65a7985d0fcb8fa4818fccdfb08
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+wj:2cD2cDWj
- TLSH T157B67C12F6E440B5E1BB99708AA69636EA327C520B31CBCF5354F61D1E336D09E36732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry