General
- Target 2026-07-03_4918f9e17d223e598130ba2f8417bcb5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 50.1MB
- Sample260703-wff6nsat9j
- SHA256 1bce1af8a62d26721b6bf34dae35006f3ee2a1947d7fcc0a2babedb45aa5cc05
- MD5 4918f9e17d223e598130ba2f8417bcb5
- SHA1 503cf2c0940aa9f8224d966829de8db0dd492cbf
- SHA512 0884720af9bf8742af1d08cad748112f6d681f33eb0e7848cde7318b766c14a436475a73b063dd72cc164eefc023d5ac0d0d08cbb52a4cf9e1b6ed934e9e416c
- SSDEEP 393216:2cDcywcDcyYo6GtcDcywcDcyYo6GwcDcywt:tAyTAyZZGAyTAyZZTAyy
- TLSH T1C8B78C16F6A881F5D07AC174C6969676EA727C420B309ACF0355F71D2E33AE09F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_4918f9e17d223e598130ba2f8417bcb5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_4918f9e17d223e598130ba2f8417bcb5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_4918f9e17d223e598130ba2f8417bcb5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 50.1MB
- SHA256 1bce1af8a62d26721b6bf34dae35006f3ee2a1947d7fcc0a2babedb45aa5cc05
- MD5 4918f9e17d223e598130ba2f8417bcb5
- SHA1 503cf2c0940aa9f8224d966829de8db0dd492cbf
- SHA512 0884720af9bf8742af1d08cad748112f6d681f33eb0e7848cde7318b766c14a436475a73b063dd72cc164eefc023d5ac0d0d08cbb52a4cf9e1b6ed934e9e416c
- SSDEEP 393216:2cDcywcDcyYo6GtcDcywcDcyYo6GwcDcywt:tAyTAyZZGAyTAyZZTAyy
- TLSH T1C8B78C16F6A881F5D07AC174C6969676EA727C420B309ACF0355F71D2E33AE09F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry