General
- Target 2026-07-08_943aa49a6ece2f51e8a905a12dd69d01_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 3.7MB
- Sample260708-169ccsax9t
- SHA256 58838defdb6afcf140105c9c00a512968a798b22a039808a62fc26c3c7aa8ee2
- MD5 943aa49a6ece2f51e8a905a12dd69d01
- SHA1 a1f574560e787d5558d744b606990819fd67184a
- SHA512 a10150d7ec184ead0c99d41495e605addb7414776f11b3663dcfd0841919c7569d64efc9cd2bcbdc724247a4ca6d9fd0bfbdeff1643e881ded70b97eb28d137b
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatglL3hpYqaneW4SkZP4sz9Mb:7ID41qW1PszVW6HXfkZc
- TLSH T16F066B42F6A48672D0B38176C5A766A6FE7234411F308ACF1388977D2F337D19A36726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_943aa49a6ece2f51e8a905a12dd69d01_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_943aa49a6ece2f51e8a905a12dd69d01_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_943aa49a6ece2f51e8a905a12dd69d01_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 3.7MB
- SHA256 58838defdb6afcf140105c9c00a512968a798b22a039808a62fc26c3c7aa8ee2
- MD5 943aa49a6ece2f51e8a905a12dd69d01
- SHA1 a1f574560e787d5558d744b606990819fd67184a
- SHA512 a10150d7ec184ead0c99d41495e605addb7414776f11b3663dcfd0841919c7569d64efc9cd2bcbdc724247a4ca6d9fd0bfbdeff1643e881ded70b97eb28d137b
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatglL3hpYqaneW4SkZP4sz9Mb:7ID41qW1PszVW6HXfkZc
- TLSH T16F066B42F6A48672D0B38176C5A766A6FE7234411F308ACF1388977D2F337D19A36726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory