General
- Target 2026-07-05_c1f9e89dd1e046ea2f1463b0532d6271_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 18.5MB
- Sample260705-d2td1sg12s
- SHA256 095b0813433b44d55f57a65064f698e4e7432f23f2fff7ae280b0ad4e06ecd77
- MD5 c1f9e89dd1e046ea2f1463b0532d6271
- SHA1 4c48e44dabed04f3232f0cfa408331021642b282
- SHA512 6f9b34701c7a0e59eaccc8a835d800bc8b4115e6517af960ece33be77bd9858b269f307a3d9c6db18df1bbf2acaf959bd32d433d892a20fa60621154628f8316
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+QSWyZ/K0ttYVAAT1Kmd0x/h1+Aly7a:zyZ/K0ttYZTEqsyZ/K0ttYZTEqylF
- TLSH T1B5177C13F2A440E9E06AD174CE669231EB327C594BF1A5EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_c1f9e89dd1e046ea2f1463b0532d6271_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_c1f9e89dd1e046ea2f1463b0532d6271_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_c1f9e89dd1e046ea2f1463b0532d6271_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 18.5MB
- SHA256 095b0813433b44d55f57a65064f698e4e7432f23f2fff7ae280b0ad4e06ecd77
- MD5 c1f9e89dd1e046ea2f1463b0532d6271
- SHA1 4c48e44dabed04f3232f0cfa408331021642b282
- SHA512 6f9b34701c7a0e59eaccc8a835d800bc8b4115e6517af960ece33be77bd9858b269f307a3d9c6db18df1bbf2acaf959bd32d433d892a20fa60621154628f8316
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+QSWyZ/K0ttYVAAT1Kmd0x/h1+Aly7a:zyZ/K0ttYZTEqsyZ/K0ttYZTEqylF
- TLSH T1B5177C13F2A440E9E06AD174CE669231EB327C594BF1A5EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry