General
- Target 2026-07-06_53cb9f019a8d908f2a95536b1cbc1016_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 14.0MB
- Sample260706-1ext9aby2w
- SHA256 58a8ff4d7aa82165b32ef3f3156ae520d686ab9555625b1c876b65eae629adca
- MD5 53cb9f019a8d908f2a95536b1cbc1016
- SHA1 eaa9a1cd052945c77e5f8fbb84259627d460db53
- SHA512 de652bb7d29526314ef6c12a3ca5e733ad1a86dcfa1b92594b52ac81735e0e796a9e360cb2d92ef6b70a72f2e86cb0cebda2434c2c53115980cf1d5072dbd6af
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCi8Vb618+:2cDcKcDcO3cJ
- TLSH T154E68C17F69444F5D16E99308A658232EA73BC120B719BCB43A4F62D1F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_53cb9f019a8d908f2a95536b1cbc1016_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_53cb9f019a8d908f2a95536b1cbc1016_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_53cb9f019a8d908f2a95536b1cbc1016_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 14.0MB
- SHA256 58a8ff4d7aa82165b32ef3f3156ae520d686ab9555625b1c876b65eae629adca
- MD5 53cb9f019a8d908f2a95536b1cbc1016
- SHA1 eaa9a1cd052945c77e5f8fbb84259627d460db53
- SHA512 de652bb7d29526314ef6c12a3ca5e733ad1a86dcfa1b92594b52ac81735e0e796a9e360cb2d92ef6b70a72f2e86cb0cebda2434c2c53115980cf1d5072dbd6af
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCi8Vb618+:2cDcKcDcO3cJ
- TLSH T154E68C17F69444F5D16E99308A658232EA73BC120B719BCB43A4F62D1F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry