General
- Target 2026-07-05_837ab87da5f4b32a2f690cebedb2e88f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 14.5MB
- Sample260705-d83k9shs5t
- SHA256 072fc63397f7ec57db0c937211530cf913edb8e76d60878357fe34ca7f373b55
- MD5 837ab87da5f4b32a2f690cebedb2e88f
- SHA1 5ded006b3588b642ab2016484c6b167e4d7043aa
- SHA512 8b3a120bb9423d03b4c90573bd8fe2eb25d8e672f7309cdf2bc5198aca56c65cf35e59d4ecfa694e7f9fd3db6e730d5208dbc1904d92339faca7de6cd24512a4
- SSDEEP 196608:l8Vb618U68Vb618U78Vb618G8Vb618U68Vb618U7D/h1+:2cDcMcAcDc
- TLSH T101E69D17F69440F5D17A953086A69336EA72BC120B319BCF4394F6192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_837ab87da5f4b32a2f690cebedb2e88f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_837ab87da5f4b32a2f690cebedb2e88f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_837ab87da5f4b32a2f690cebedb2e88f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 14.5MB
- SHA256 072fc63397f7ec57db0c937211530cf913edb8e76d60878357fe34ca7f373b55
- MD5 837ab87da5f4b32a2f690cebedb2e88f
- SHA1 5ded006b3588b642ab2016484c6b167e4d7043aa
- SHA512 8b3a120bb9423d03b4c90573bd8fe2eb25d8e672f7309cdf2bc5198aca56c65cf35e59d4ecfa694e7f9fd3db6e730d5208dbc1904d92339faca7de6cd24512a4
- SSDEEP 196608:l8Vb618U68Vb618U78Vb618G8Vb618U68Vb618U7D/h1+:2cDcMcAcDc
- TLSH T101E69D17F69440F5D17A953086A69336EA72BC120B319BCF4394F6192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry