General
- Target 2026-07-07_f0a7a3ae782488304baec3627e954ab8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 44.8MB
- Sample260707-2b2jpse161
- SHA256 dff041eee9855ca5d4d8b9901c18f12395b3be79f3d9aee8d6d475e40c4a429b
- MD5 f0a7a3ae782488304baec3627e954ab8
- SHA1 c53657345733e0be09b023fd1f6304820607cd07
- SHA512 7bd9954d501a0cf0060e9b23a0d646cf908937efcf35b04de90276096ad5fc30a4cd513dde0bd32943e967ae1e842114995f13211f6a06f300b24fb2c29a4e79
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+fc8Vb618U68Vbb8Vb618U68VbCK:2cD2cD3cD2cDilucD2cD3cD2cDil6
- TLSH T11FA78C16F6A441F5E17B95708AA69636EA327C520F30CBCF4354F61D2E336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_f0a7a3ae782488304baec3627e954ab8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_f0a7a3ae782488304baec3627e954ab8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_f0a7a3ae782488304baec3627e954ab8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 44.8MB
- SHA256 dff041eee9855ca5d4d8b9901c18f12395b3be79f3d9aee8d6d475e40c4a429b
- MD5 f0a7a3ae782488304baec3627e954ab8
- SHA1 c53657345733e0be09b023fd1f6304820607cd07
- SHA512 7bd9954d501a0cf0060e9b23a0d646cf908937efcf35b04de90276096ad5fc30a4cd513dde0bd32943e967ae1e842114995f13211f6a06f300b24fb2c29a4e79
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+fc8Vb618U68Vbb8Vb618U68VbCK:2cD2cD3cD2cDilucD2cD3cD2cDil6
- TLSH T11FA78C16F6A441F5E17B95708AA69636EA327C520F30CBCF4354F61D2E336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry