General
- Target 2026-07-03_1846c53fcdc72e53f86352b0c78f2b2e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 41.6MB
- Sample260703-e4xd5abv3t
- SHA256 7ec80a86b19cd4e3617a143232a148f55ea0f698dabf68bb0940d46921bb1867
- MD5 1846c53fcdc72e53f86352b0c78f2b2e
- SHA1 bbc1d365b5ab10ae9794eaafeaa6a2fd96cb6d0e
- SHA512 49105311dedbc769a194fc0126b680ea7fa2938e3909ac1303c4843699a26a0ada54e3fe1f75359abfd93df4ea05bbfe0a3a026a50d7e2cc2b1f5a8cf73eca3f
- SSDEEP 393216:2cDcyqWqQjpWcDcyqWqQjpJcDcyqWqQjpWcDcyqWqQjpJG:tAy1fjpNAy1fjpaAy1fjpNAy1fjpE
- TLSH T1A4A78D13F6A940E8E06ED57487669332EA72BC520B31A6DF0390B7192F77AD05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_1846c53fcdc72e53f86352b0c78f2b2e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_1846c53fcdc72e53f86352b0c78f2b2e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260630-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_1846c53fcdc72e53f86352b0c78f2b2e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 41.6MB
- SHA256 7ec80a86b19cd4e3617a143232a148f55ea0f698dabf68bb0940d46921bb1867
- MD5 1846c53fcdc72e53f86352b0c78f2b2e
- SHA1 bbc1d365b5ab10ae9794eaafeaa6a2fd96cb6d0e
- SHA512 49105311dedbc769a194fc0126b680ea7fa2938e3909ac1303c4843699a26a0ada54e3fe1f75359abfd93df4ea05bbfe0a3a026a50d7e2cc2b1f5a8cf73eca3f
- SSDEEP 393216:2cDcyqWqQjpWcDcyqWqQjpJcDcyqWqQjpWcDcyqWqQjpJG:tAy1fjpNAy1fjpaAy1fjpNAy1fjpE
- TLSH T1A4A78D13F6A940E8E06ED57487669332EA72BC520B31A6DF0390B7192F77AD05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry