General
- Target 2026-07-01_0b9facbb23e37560850f2e700ea4e957_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 25.1MB
- Sample260702-asjxfaav3s
- SHA256 93c6b4e618184d7b4432699f886485c4834aaf71b1af7e37e7ce47fcef2f6ca3
- MD5 0b9facbb23e37560850f2e700ea4e957
- SHA1 e3badb8453d144b5746d44a8cd79c777eb52c624
- SHA512 ab9bf9e927af22cae9b3ad2baa0b5034c630e8b96974aeee42f70021c3ccc5fdd527263bd053e93ae3dcc9ffafed6a5903c9949da797a7a2d1afd05c28dd138d
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzR8Vb618U68Vbb8Vb618U68VY:2cD2cDIEU8IBJicD2cDIEU8IBJx
- TLSH T13647AE17F6A440F5D17A853485A69236EB72BC120B318BCB53A4F66D1F337D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_0b9facbb23e37560850f2e700ea4e957_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_0b9facbb23e37560850f2e700ea4e957_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_0b9facbb23e37560850f2e700ea4e957_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 25.1MB
- SHA256 93c6b4e618184d7b4432699f886485c4834aaf71b1af7e37e7ce47fcef2f6ca3
- MD5 0b9facbb23e37560850f2e700ea4e957
- SHA1 e3badb8453d144b5746d44a8cd79c777eb52c624
- SHA512 ab9bf9e927af22cae9b3ad2baa0b5034c630e8b96974aeee42f70021c3ccc5fdd527263bd053e93ae3dcc9ffafed6a5903c9949da797a7a2d1afd05c28dd138d
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzR8Vb618U68Vbb8Vb618U68VY:2cD2cDIEU8IBJicD2cDIEU8IBJx
- TLSH T13647AE17F6A440F5D17A853485A69236EB72BC120B318BCB53A4F66D1F337D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry