General
- Target 2026-07-07_8f48311458e6218427b167c59e305ebb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 17.8MB
- Sample260707-yzajcaes2q
- SHA256 5965a26bcdcb7fb75357ed00a2944edfa02bb091c36955db5a74bb738162dcdf
- MD5 8f48311458e6218427b167c59e305ebb
- SHA1 beb15fc936c0da23fbe72355a0c5bcc526af29fe
- SHA512 6a4496b402d8457aee7799a9c10b53f8b1f0e6bcf5a272377e93fe8ec13ce76fab95d48353fd88feba0b26a3de09146922a7606dfefa1246dd6496ef5f07f88f
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+4w/h1+Qw/h1+8w/h1+Qw/h1+JWqQI0py+:6WqQjp3
- TLSH T1C2177C53F6A481B1D0B6C474C5A6A736EA727C425B308BCB5345E7282E376D09F3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_8f48311458e6218427b167c59e305ebb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_8f48311458e6218427b167c59e305ebb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_8f48311458e6218427b167c59e305ebb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 17.8MB
- SHA256 5965a26bcdcb7fb75357ed00a2944edfa02bb091c36955db5a74bb738162dcdf
- MD5 8f48311458e6218427b167c59e305ebb
- SHA1 beb15fc936c0da23fbe72355a0c5bcc526af29fe
- SHA512 6a4496b402d8457aee7799a9c10b53f8b1f0e6bcf5a272377e93fe8ec13ce76fab95d48353fd88feba0b26a3de09146922a7606dfefa1246dd6496ef5f07f88f
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+4w/h1+Qw/h1+8w/h1+Qw/h1+JWqQI0py+:6WqQjp3
- TLSH T1C2177C53F6A481B1D0B6C474C5A6A736EA727C425B308BCB5345E7282E376D09F3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry