General
- Target 2026-07-02_0d526c3113e87757c3e5588db7831742_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 38.8MB
- Sample260702-1cn5bsb17j
- SHA256 a6bccbc30d83e50a7f3d39022b2c00ac8f5ffccf461b060af37ae3bb80488b6a
- MD5 0d526c3113e87757c3e5588db7831742
- SHA1 eb61049cab55d6d1dbeb8f5cd35742097edc5dc1
- SHA512 739d2a1ca052282c7e1ee5ccb24be02c4f5254c4c4c8d3c533a6685d35b297d0df3b38aafd8e5c440207844a5fb8ca4d441d1f2d9054852ef800f4a196c23d4e
- SSDEEP 393216:2cDc6cDcSvyEYKb7cDc6cDcSvyEYKbf6cDcRce:tAZA2aAZA2bAie
- TLSH T1DC978E16BBA440F5D17AD5348A669632EB72BC120B319BCF4390F61D2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_0d526c3113e87757c3e5588db7831742_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_0d526c3113e87757c3e5588db7831742_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260630-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_0d526c3113e87757c3e5588db7831742_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 38.8MB
- SHA256 a6bccbc30d83e50a7f3d39022b2c00ac8f5ffccf461b060af37ae3bb80488b6a
- MD5 0d526c3113e87757c3e5588db7831742
- SHA1 eb61049cab55d6d1dbeb8f5cd35742097edc5dc1
- SHA512 739d2a1ca052282c7e1ee5ccb24be02c4f5254c4c4c8d3c533a6685d35b297d0df3b38aafd8e5c440207844a5fb8ca4d441d1f2d9054852ef800f4a196c23d4e
- SSDEEP 393216:2cDc6cDcSvyEYKb7cDc6cDcSvyEYKbf6cDcRce:tAZA2aAZA2bAie
- TLSH T1DC978E16BBA440F5D17AD5348A669632EB72BC120B319BCF4390F61D2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry