General
- Target 2026-07-02_b13ed5e3833a7d99c6daeeb73c15ad45_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.1MB
- Sample260702-vatzxae19r
- SHA256 78a7eb7da9869f4d70d7f6168e3f8ee0976154ec6c380dc510f9dc2b011390fd
- MD5 b13ed5e3833a7d99c6daeeb73c15ad45
- SHA1 d84cf8742724c0bd450444cc4fa68a9e1454d56e
- SHA512 cdf54d759889ef1fed54c68e40ea04277e7d5b22da21eb4bd08bc4e088fb586b2af13f9c2e5938d0e96c85ab89b76fcc32e1a1b39858e7e3003322d0571f151e
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+ReWyZ/K0ttYVAAToGn:YZyZ/K0ttYZToG
- TLSH T1AED68D13F6A481B5D0B6C174CAA69736EB327C454B7196CF1241E7982E33AD0AF3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_b13ed5e3833a7d99c6daeeb73c15ad45_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_b13ed5e3833a7d99c6daeeb73c15ad45_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_b13ed5e3833a7d99c6daeeb73c15ad45_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.1MB
- SHA256 78a7eb7da9869f4d70d7f6168e3f8ee0976154ec6c380dc510f9dc2b011390fd
- MD5 b13ed5e3833a7d99c6daeeb73c15ad45
- SHA1 d84cf8742724c0bd450444cc4fa68a9e1454d56e
- SHA512 cdf54d759889ef1fed54c68e40ea04277e7d5b22da21eb4bd08bc4e088fb586b2af13f9c2e5938d0e96c85ab89b76fcc32e1a1b39858e7e3003322d0571f151e
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+ReWyZ/K0ttYVAAToGn:YZyZ/K0ttYZToG
- TLSH T1AED68D13F6A481B5D0B6C174CAA69736EB327C454B7196CF1241E7982E33AD0AF3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry