General
- Target 2026-07-05_53d5441796bcd92aa6ae470933826cb6_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 3.2MB
- Sample260705-ec33laht3s
- SHA256 cdfc62d2b5d19b187ee968e02a393302833b1293b424b1f5bd4ee650de7c89f1
- MD5 53d5441796bcd92aa6ae470933826cb6
- SHA1 5a3592ca7d84f14952c30521a3d87528776658c0
- SHA512 af40fd8253510e310e486258bb831b92fb30a4e30efe4ab0c011c00ebaae4727b9063ef62e7a4ad97a88c5ecbec4d89eba07b424ebcd79883b372ece7ada1b4b
- SSDEEP 49152:jYRw5x6M1yJIUb/ezSC6vUzPvMHjyKVO88hXl+UPji0Aj:Uu5x6M1IezSC6v2XMHG/h1+yjo
- TLSH T10DF53B26F5788372D072C0B9C5D6A7AAFE3234424B308ACB4346D76C2E276D5DA36735
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_53d5441796bcd92aa6ae470933826cb6_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_53d5441796bcd92aa6ae470933826cb6_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_53d5441796bcd92aa6ae470933826cb6_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 3.2MB
- SHA256 cdfc62d2b5d19b187ee968e02a393302833b1293b424b1f5bd4ee650de7c89f1
- MD5 53d5441796bcd92aa6ae470933826cb6
- SHA1 5a3592ca7d84f14952c30521a3d87528776658c0
- SHA512 af40fd8253510e310e486258bb831b92fb30a4e30efe4ab0c011c00ebaae4727b9063ef62e7a4ad97a88c5ecbec4d89eba07b424ebcd79883b372ece7ada1b4b
- SSDEEP 49152:jYRw5x6M1yJIUb/ezSC6vUzPvMHjyKVO88hXl+UPji0Aj:Uu5x6M1IezSC6v2XMHG/h1+yjo
- TLSH T10DF53B26F5788372D072C0B9C5D6A7AAFE3234424B308ACB4346D76C2E276D5DA36735
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry