General
- Target 2026-07-08_8353b55c2265b338dfaadf41bcf3b6a9_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 39.3MB
- Sample260708-v33graex5x
- SHA256 df46e181d2a2c2a6c5e71668cd6942997bb18bc7605ca3189ab3f7562f4ca483
- MD5 8353b55c2265b338dfaadf41bcf3b6a9
- SHA1 dbe4c71ac984cc2a55b73f63757be42c0538fc59
- SHA512 53a0311aa7d299dd4c1c9c5fd3fb4a6b162229429913af4b3822bc4718ccca1957e29def2d1f479b2313d045e3aee7dcd38acb621103a17184944de99297d932
- SSDEEP 786432:zyZ/K0ttYZTfqiyZ/K0ttYZTfqByZ/K0ttYZTfqiyZ/K0ttYZTfqU:uZ/K0ttYRfqpZ/K0ttYRfqoZ/K0ttYRJ
- TLSH T133977D13F1A841A9E0A6D174CE669631EB327C494BF195EF3240B7D82E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_8353b55c2265b338dfaadf41bcf3b6a9_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_8353b55c2265b338dfaadf41bcf3b6a9_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_8353b55c2265b338dfaadf41bcf3b6a9_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 39.3MB
- SHA256 df46e181d2a2c2a6c5e71668cd6942997bb18bc7605ca3189ab3f7562f4ca483
- MD5 8353b55c2265b338dfaadf41bcf3b6a9
- SHA1 dbe4c71ac984cc2a55b73f63757be42c0538fc59
- SHA512 53a0311aa7d299dd4c1c9c5fd3fb4a6b162229429913af4b3822bc4718ccca1957e29def2d1f479b2313d045e3aee7dcd38acb621103a17184944de99297d932
- SSDEEP 786432:zyZ/K0ttYZTfqiyZ/K0ttYZTfqByZ/K0ttYZTfqiyZ/K0ttYZTfqU:uZ/K0ttYRfqpZ/K0ttYRfqoZ/K0ttYRJ
- TLSH T133977D13F1A841A9E0A6D174CE669631EB327C494BF195EF3240B7D82E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry