General
- Target 2026-07-01_8ed08cb3fcece0c18a15dcf514464765_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 9.9MB
- Sample260701-xlfyjaev81
- SHA256 7b2ef9478a8e2d40d391e947de68ccceed9abcaf2bad541c9e1f5ba3146295d0
- MD5 8ed08cb3fcece0c18a15dcf514464765
- SHA1 e57fa29092df732520ba1379afcd0e8e3fd80516
- SHA512 8d966247cf8e832ccd27a46a09468aab2c6ce64ed5a82f5a8988722c2a9072b45ab63d06af8e71d6f6f31528a1839c62e62ab70cf4a68e864e758709dcdf27f2
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp7jo1ezSC6v2XMHzS:JSWyZ/K0ttYVAAT1Kmd09oiN
- TLSH T1A9A67D13F2E841A9E0A6D174CE669631EB327C494BF195DF2240B7D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_8ed08cb3fcece0c18a15dcf514464765_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_8ed08cb3fcece0c18a15dcf514464765_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_8ed08cb3fcece0c18a15dcf514464765_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 9.9MB
- SHA256 7b2ef9478a8e2d40d391e947de68ccceed9abcaf2bad541c9e1f5ba3146295d0
- MD5 8ed08cb3fcece0c18a15dcf514464765
- SHA1 e57fa29092df732520ba1379afcd0e8e3fd80516
- SHA512 8d966247cf8e832ccd27a46a09468aab2c6ce64ed5a82f5a8988722c2a9072b45ab63d06af8e71d6f6f31528a1839c62e62ab70cf4a68e864e758709dcdf27f2
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp7jo1ezSC6v2XMHzS:JSWyZ/K0ttYVAAT1Kmd09oiN
- TLSH T1A9A67D13F2E841A9E0A6D174CE669631EB327C494BF195DF2240B7D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry