General
- Target 2026-07-03_8cb2c5a0f604a7197ff318024a371400_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 29.9MB
- Sample260703-daw1tsav8y
- SHA256 965e9b0cafb682a4184e8dfac6dab41b8a8db103871b43c0ea81068d93b7151a
- MD5 8cb2c5a0f604a7197ff318024a371400
- SHA1 965cd08a34c752be6ade955b25022be773ce83c5
- SHA512 40d7079758da1ceddbf003dd8e8e9e3e21a8c66788478b398d535acc9159d52ee8616ef1ddcbdbcb3201ffb8b44b52981924e6c34486346f3140555c4a4b3217
- SSDEEP 196608:l8Vb618U68Vb618US18U9L/h1+E8Vb618U68Vb618US18U9L/h1+joK9GnM8Vb6V:2cDcywcDcyYo6GtcDcy
- TLSH T1D7678D16F6A882F5D07AC174C6969676EA727C420B309ACF0355F71D2E33AD09F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_8cb2c5a0f604a7197ff318024a371400_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_8cb2c5a0f604a7197ff318024a371400_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_8cb2c5a0f604a7197ff318024a371400_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 29.9MB
- SHA256 965e9b0cafb682a4184e8dfac6dab41b8a8db103871b43c0ea81068d93b7151a
- MD5 8cb2c5a0f604a7197ff318024a371400
- SHA1 965cd08a34c752be6ade955b25022be773ce83c5
- SHA512 40d7079758da1ceddbf003dd8e8e9e3e21a8c66788478b398d535acc9159d52ee8616ef1ddcbdbcb3201ffb8b44b52981924e6c34486346f3140555c4a4b3217
- SSDEEP 196608:l8Vb618U68Vb618US18U9L/h1+E8Vb618U68Vb618US18U9L/h1+joK9GnM8Vb6V:2cDcywcDcyYo6GtcDcy
- TLSH T1D7678D16F6A882F5D07AC174C6969676EA727C420B309ACF0355F71D2E33AD09F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry