General
- Target 2026-07-06_ac0e025bcd9708e83136e0f81d230057_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 26.6MB
- Sample260707-b23xcaft8z
- SHA256 21e1afdabf351f21f0aadc96b3d15a13d03d1e8583bb7eb0744bbfaf9119fac5
- MD5 ac0e025bcd9708e83136e0f81d230057
- SHA1 56566f5e7927c576a09b60ccf5cf0622c71aba2d
- SHA512 95a455c39096e122f96992df6f2c8d87ae8c3a10b048f6912eb719d064ba24b4eacd62c1457ce7f7490f2fad41701ffb81e553f7afc5f4534b8aa6220ee9c789
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18ULJ8Vb618U68Vb618US18Ui8k:2cDcyjcDcy36cDcyjcDcy3
- TLSH T1DF579D17F69440F9D06ED5748A558236EA72BC520B31ABCF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_ac0e025bcd9708e83136e0f81d230057_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_ac0e025bcd9708e83136e0f81d230057_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_ac0e025bcd9708e83136e0f81d230057_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 26.6MB
- SHA256 21e1afdabf351f21f0aadc96b3d15a13d03d1e8583bb7eb0744bbfaf9119fac5
- MD5 ac0e025bcd9708e83136e0f81d230057
- SHA1 56566f5e7927c576a09b60ccf5cf0622c71aba2d
- SHA512 95a455c39096e122f96992df6f2c8d87ae8c3a10b048f6912eb719d064ba24b4eacd62c1457ce7f7490f2fad41701ffb81e553f7afc5f4534b8aa6220ee9c789
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18ULJ8Vb618U68Vb618US18Ui8k:2cDcyjcDcy36cDcyjcDcy3
- TLSH T1DF579D17F69440F9D06ED5748A558236EA72BC520B31ABCF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application