General
- Target 2026-07-07_3e397c26581ec8b9d7823e3b1eb5bca5_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar
- Size 17.4MB
- Sample260707-zn2n5aez3p
- SHA256 3e33cb989634de6394eea4dc090f6c3b5082f6752090b50addf70598c1307ccd
- MD5 3e397c26581ec8b9d7823e3b1eb5bca5
- SHA1 b4f06660cbee5e10f5578039453b90805f0f9ef5
- SHA512 8d8814462a02aebf4238d7c36d94961961e5f6754222ad8044de3adf76edb7bfa6c1f99b566a41e7fefa0306971f844e06ffb74827b190fbe8d7073cc152d48e
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+79w/h1+Qw/h1+8w/h1+Qw/h1+7yvyEYc/b3w8O:qGyvyEYKbi
- TLSH T1D2076C66B6A481B1D076C074C4A6A776EB7278421B31CBCB4346CB2D2F376D09E36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_3e397c26581ec8b9d7823e3b1eb5bca5_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_3e397c26581ec8b9d7823e3b1eb5bca5_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_3e397c26581ec8b9d7823e3b1eb5bca5_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_stealc_vidar
- Size 17.4MB
- SHA256 3e33cb989634de6394eea4dc090f6c3b5082f6752090b50addf70598c1307ccd
- MD5 3e397c26581ec8b9d7823e3b1eb5bca5
- SHA1 b4f06660cbee5e10f5578039453b90805f0f9ef5
- SHA512 8d8814462a02aebf4238d7c36d94961961e5f6754222ad8044de3adf76edb7bfa6c1f99b566a41e7fefa0306971f844e06ffb74827b190fbe8d7073cc152d48e
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+79w/h1+Qw/h1+8w/h1+Qw/h1+7yvyEYc/b3w8O:qGyvyEYKbi
- TLSH T1D2076C66B6A481B1D076C074C4A6A776EB7278421B31CBCB4346CB2D2F376D09E36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry