General
- Target 2026-07-02_8d1a7e0ca07f44cdfcce4f63b43e8735_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 54.0MB
- Sample260702-gvylyaax8p
- SHA256 832e519315b4fcc99cf991751992e9edec8a4fa564efd2a4dd8e86ac9da870c6
- MD5 8d1a7e0ca07f44cdfcce4f63b43e8735
- SHA1 397ca5bd747d09420e5cdda8e1b8836cf46c600e
- SHA512 67ac6fc7e8a17d3fb854980498b22a5e20982091e6a536e76b2a5a089d4610af971bc7668daa7bc2e4f7fffb3cf8c9acf7ee2ebd50cc13322a583468aa07f5a8
- SSDEEP 393216:2cD2cDIEU8IBJvcD2cDIEU8IBJbKDcD2cDIEU8IBJvcD2cDIEU8IBJbKu:tZMzkZMz+AZMzkZMz+u
- TLSH T185C79D16F6E440F5D17A95348AA69232EB72BC520B31C7CF4364F6191F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_8d1a7e0ca07f44cdfcce4f63b43e8735_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_8d1a7e0ca07f44cdfcce4f63b43e8735_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_8d1a7e0ca07f44cdfcce4f63b43e8735_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 54.0MB
- SHA256 832e519315b4fcc99cf991751992e9edec8a4fa564efd2a4dd8e86ac9da870c6
- MD5 8d1a7e0ca07f44cdfcce4f63b43e8735
- SHA1 397ca5bd747d09420e5cdda8e1b8836cf46c600e
- SHA512 67ac6fc7e8a17d3fb854980498b22a5e20982091e6a536e76b2a5a089d4610af971bc7668daa7bc2e4f7fffb3cf8c9acf7ee2ebd50cc13322a583468aa07f5a8
- SSDEEP 393216:2cD2cDIEU8IBJvcD2cDIEU8IBJbKDcD2cDIEU8IBJvcD2cDIEU8IBJbKu:tZMzkZMz+AZMzkZMz+u
- TLSH T185C79D16F6E440F5D17A95348AA69232EB72BC520B31C7CF4364F6191F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry