General
- Target 2026-07-07_c4a6a264264870e68acc379c5cc69376_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 3.0MB
- Sample260707-2lz4maft6s
- SHA256 e111c2801b843455b7a137ba34c3d766ac99b3c6ba0ab660d5cb8cbb0c360681
- MD5 c4a6a264264870e68acc379c5cc69376
- SHA1 8b6ee7139ccc2ec3b7f223cd73830d38589e7c7b
- SHA512 e566e2a2c29e61d4680625ae1a5ccbfdaac72ffcb0408f347c8953a798050242d0770d94458ce426bcb191277a11fd9470a35617c200fd968df44dbbb86daa7f
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluDWW1PszNsehO9QY5k256rU:TID41vyW1Psznc5irU
- TLSH T14BE54946F3954AA5D16F5130C66642A2BA73BC210FA097CF13D0EA3D6F327C0AA79717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_c4a6a264264870e68acc379c5cc69376_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_c4a6a264264870e68acc379c5cc69376_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_c4a6a264264870e68acc379c5cc69376_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 3.0MB
- SHA256 e111c2801b843455b7a137ba34c3d766ac99b3c6ba0ab660d5cb8cbb0c360681
- MD5 c4a6a264264870e68acc379c5cc69376
- SHA1 8b6ee7139ccc2ec3b7f223cd73830d38589e7c7b
- SHA512 e566e2a2c29e61d4680625ae1a5ccbfdaac72ffcb0408f347c8953a798050242d0770d94458ce426bcb191277a11fd9470a35617c200fd968df44dbbb86daa7f
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluDWW1PszNsehO9QY5k256rU:TID41vyW1Psznc5irU
- TLSH T14BE54946F3954AA5D16F5130C66642A2BA73BC210FA097CF13D0EA3D6F327C0AA79717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory