General
- Target 2026-07-06_8d6665ebdab7e9ce59e6fee0004702f9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.4MB
- Sample260707-ct4dksc16r
- SHA256 44c02a4adcc764abdf056eeb8b93b773d4104212ecd765e670fb3f0212b5947f
- MD5 8d6665ebdab7e9ce59e6fee0004702f9
- SHA1 be52b7ab69886a494a7ecc7f1592fbd1405db5b9
- SHA512 5a166ddb2675c28fc494647b6ae6abeee878b41639576b3b436ed8fd2b127c7c620909433e61050ef0d6ae9622f16b2594dee86317ff64a11386167038fab49c
- SSDEEP 98304:TID41qM5ram6m51KYcL2tBW1Pszx+rbrX:Tui52m6m510L2yxsVyXX
- TLSH T19B465B16B7944AA5D57B8135856682A2EE737C111F3097CF1390AA3D3F337D0AA3AB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_8d6665ebdab7e9ce59e6fee0004702f9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_8d6665ebdab7e9ce59e6fee0004702f9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_8d6665ebdab7e9ce59e6fee0004702f9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.4MB
- SHA256 44c02a4adcc764abdf056eeb8b93b773d4104212ecd765e670fb3f0212b5947f
- MD5 8d6665ebdab7e9ce59e6fee0004702f9
- SHA1 be52b7ab69886a494a7ecc7f1592fbd1405db5b9
- SHA512 5a166ddb2675c28fc494647b6ae6abeee878b41639576b3b436ed8fd2b127c7c620909433e61050ef0d6ae9622f16b2594dee86317ff64a11386167038fab49c
- SSDEEP 98304:TID41qM5ram6m51KYcL2tBW1Pszx+rbrX:Tui52m6m510L2yxsVyXX
- TLSH T19B465B16B7944AA5D57B8135856682A2EE737C111F3097CF1390AA3D3F337D0AA3AB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory