General
- Target 2026-07-07_e9e4dcc38b479e5f2f347e8eafe94a46_amadey_cobalt-strike_emotet_glassworm_hijackloader_icedid_mespinoza_njrat_remcos_ryuk_satacom_vidar_wannacry
- Size 21.2MB
- Sample260707-2dn2dse19w
- SHA256 242e604768dfa0d22304e6a05a117d78103706dc9d6a3866ae04a9cdeb3155a3
- MD5 e9e4dcc38b479e5f2f347e8eafe94a46
- SHA1 6bbbb54ab62197e75f2491bf6b0c2783931c61b2
- SHA512 e332a8d88da8382e29fc5821af72afee7173fdadf8efde80e3518db16ab0811c76ad5a030ac9d2297187a9123afbea8ff90765900551b2389e59c11d63368596
- SSDEEP 196608:1cIkGnNtcIkGnYcITtcIkGnNtcIkGnYcI6D:m5Gk5GFB5Gk5GFND
- TLSH T10F274A2671E140A5C299C134CF568632E3F27C298FF193EBA155B2DD2F336D07A3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_e9e4dcc38b479e5f2f347e8eafe94a46_amadey_cobalt-strike_emotet_glassworm_hijackloader_icedi.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_e9e4dcc38b479e5f2f347e8eafe94a46_amadey_cobalt-strike_emotet_glassworm_hijackloader_icedi.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_e9e4dcc38b479e5f2f347e8eafe94a46_amadey_cobalt-strike_emotet_glassworm_hijackloader_icedid_mespinoza_njrat_remcos_ryuk_satacom_vidar_wannacry
- Size 21.2MB
- SHA256 242e604768dfa0d22304e6a05a117d78103706dc9d6a3866ae04a9cdeb3155a3
- MD5 e9e4dcc38b479e5f2f347e8eafe94a46
- SHA1 6bbbb54ab62197e75f2491bf6b0c2783931c61b2
- SHA512 e332a8d88da8382e29fc5821af72afee7173fdadf8efde80e3518db16ab0811c76ad5a030ac9d2297187a9123afbea8ff90765900551b2389e59c11d63368596
- SSDEEP 196608:1cIkGnNtcIkGnYcITtcIkGnNtcIkGnYcI6D:m5Gk5GFB5Gk5GFND
- TLSH T10F274A2671E140A5C299C134CF568632E3F27C298FF193EBA155B2DD2F336D07A3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.