General
- Target 2026-07-06_fb753ec2c305e52cee09c0555e73dc2a_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_vidar
- Size 3.0MB
- Sample260706-3tmzpsaw5n
- SHA256 9652dd133aa855a193f3f14caaa4a94b2d370076271e1021204aa145485aa7e3
Score
8/10
Malware Config
Targets
-
- Target 2026-07-06_fb753ec2c305e52cee09c0555e73dc2a_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_vidar
- Size 3.0MB
- SHA256 9652dd133aa855a193f3f14caaa4a94b2d370076271e1021204aa145485aa7e3
Score8/10Downloads MZ/PE file
Executes dropped EXE
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Suspicious use of NtSetInformationThreadHideFromDebugger