General
- Target 2026-07-07_045192ac4bfed53acbc68d5eb9e52034_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 42.5MB
- Sample260707-3rp2aaf18t
- SHA256 927aa79719ac4bae9922413111983b0dfc6af24353d8294ef7c0110a3060f65d
- MD5 045192ac4bfed53acbc68d5eb9e52034
- SHA1 d17493bdbbde6e5d572c4add52b96cf1e873dc9a
- SHA512 d1ac3fae8edb6c2391c75173f7b7796847e9554db3951bc59e9e8d5f60b08b26f1d61fe59c05d7137782361fad17561a2123841ff481a14c2e33f616aaf12abd
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+fc8Vb618U68Vbb8Vb618U68VbCX:2cD2cD3cD2cDilucD2cD3cD2cDy
- TLSH T176A78D16F6A444F5E17B99708AA69236EA327C520B31C7CF4354F61D2E336D09E3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_045192ac4bfed53acbc68d5eb9e52034_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_045192ac4bfed53acbc68d5eb9e52034_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_045192ac4bfed53acbc68d5eb9e52034_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 42.5MB
- SHA256 927aa79719ac4bae9922413111983b0dfc6af24353d8294ef7c0110a3060f65d
- MD5 045192ac4bfed53acbc68d5eb9e52034
- SHA1 d17493bdbbde6e5d572c4add52b96cf1e873dc9a
- SHA512 d1ac3fae8edb6c2391c75173f7b7796847e9554db3951bc59e9e8d5f60b08b26f1d61fe59c05d7137782361fad17561a2123841ff481a14c2e33f616aaf12abd
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+fc8Vb618U68Vbb8Vb618U68VbCX:2cD2cD3cD2cDilucD2cD3cD2cDy
- TLSH T176A78D16F6A444F5E17B99708AA69236EA327C520B31C7CF4354F61D2E336D09E3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry