General
- Target 2026-07-03_b4908d8dd68965c758ef7b5ddd6edb46_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 23.3MB
- Sample260703-hadlpscv8y
- SHA256 97ced5201c371af577440e46879d80d83c4f51e30a52aeac84de694ce67f9dca
- MD5 b4908d8dd68965c758ef7b5ddd6edb46
- SHA1 f9c169093f82fd2a604751a63692f797f39b72e0
- SHA512 a92a767ff8fc04b08a2fcc5e8ad229b321f88d14f9accf06206fc9f00bd6550f538a84f33f98a643db070d77a1149b007f4715347db452a8e0a3323550bb98e1
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+fc8Vb618U68Vbb8Vb618U68VbCr:2cD2cD3cD2cDil
- TLSH T1D1378C16F6A441F5E17B95708AA69636EA327C520B30CBCF4354F61D2E336D09E3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_b4908d8dd68965c758ef7b5ddd6edb46_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_b4908d8dd68965c758ef7b5ddd6edb46_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_b4908d8dd68965c758ef7b5ddd6edb46_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 23.3MB
- SHA256 97ced5201c371af577440e46879d80d83c4f51e30a52aeac84de694ce67f9dca
- MD5 b4908d8dd68965c758ef7b5ddd6edb46
- SHA1 f9c169093f82fd2a604751a63692f797f39b72e0
- SHA512 a92a767ff8fc04b08a2fcc5e8ad229b321f88d14f9accf06206fc9f00bd6550f538a84f33f98a643db070d77a1149b007f4715347db452a8e0a3323550bb98e1
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+fc8Vb618U68Vbb8Vb618U68VbCr:2cD2cD3cD2cDil
- TLSH T1D1378C16F6A441F5E17B95708AA69636EA327C520B30CBCF4354F61D2E336D09E3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry