General
- Target 2026-07-04_488262eeb33fcf11373b259c0a7e97e1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 10.4MB
- Sample260704-xpdycags5p
- SHA256 e7d29c20193f09bc2bf9ff14ee6413d2383f7677a530d52ccdf080acff55a1ff
- MD5 488262eeb33fcf11373b259c0a7e97e1
- SHA1 ac3a4bb423204ba79a76868a9eeeaf40e3202c08
- SHA512 e5285528a26adbe894f8a9cca63d9bc0106b9e9008a2fcc7712227e59ae6038bc4ab202bc14b7a1dc9d647edc2086865fbe36476c1ee7e2310d6b996bd51e422
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb6nUm8USnUm8UGq9ceq9+2xl/S9hx0z:l8Vb618U68Vb618US18UGWqQI0bKz
- TLSH T1F8B68C17B6E500E8D06ED4748B569232EAB2BC520B70A7DF4350B7192F73AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_488262eeb33fcf11373b259c0a7e97e1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_488262eeb33fcf11373b259c0a7e97e1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_488262eeb33fcf11373b259c0a7e97e1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 10.4MB
- SHA256 e7d29c20193f09bc2bf9ff14ee6413d2383f7677a530d52ccdf080acff55a1ff
- MD5 488262eeb33fcf11373b259c0a7e97e1
- SHA1 ac3a4bb423204ba79a76868a9eeeaf40e3202c08
- SHA512 e5285528a26adbe894f8a9cca63d9bc0106b9e9008a2fcc7712227e59ae6038bc4ab202bc14b7a1dc9d647edc2086865fbe36476c1ee7e2310d6b996bd51e422
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb6nUm8USnUm8UGq9ceq9+2xl/S9hx0z:l8Vb618U68Vb618US18UGWqQI0bKz
- TLSH T1F8B68C17B6E500E8D06ED4748B569232EAB2BC520B70A7DF4350B7192F73AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry