General
- Target 2026-07-10_b425a00bf46f8a17a7fb09d43a34f777_amadey_cobalt-strike_elex_glassworm_hijackloader_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_vidar
- Size 5.9MB
- Sample260710-1z52csev71
- SHA256 a4031ca570e796705b74c89f50ede2f6893a435acdb9c864b369595a2b5e6745
- MD5 b425a00bf46f8a17a7fb09d43a34f777
- SHA1 6323b014fec81a320385c3199b8101251ea8e753
- SHA512 9bbfff4303ba5980df645a11ad02762eba4a04588e6e01efea9b8fb79516e5d98e8ac23ce6d4e227b582a022c7439a229dd348861faf915968fcaa9012470bce
- SSDEEP 98304:njBxcO4EY+ThmUv6qp7CtZNh7XE0t4tUpKjoUd:njBxcO4ONmq7CtF56tUpso6
- TLSH T15E569E22B298C0B5D4678075C57966B6D57CBC61873186CF3380BE3C7F36AD19A3A362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_b425a00bf46f8a17a7fb09d43a34f777_amadey_cobalt-strike_elex_glassworm_hijackloader_redline.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_b425a00bf46f8a17a7fb09d43a34f777_amadey_cobalt-strike_elex_glassworm_hijackloader_redline.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_b425a00bf46f8a17a7fb09d43a34f777_amadey_cobalt-strike_elex_glassworm_hijackloader_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_vidar
- Size 5.9MB
- SHA256 a4031ca570e796705b74c89f50ede2f6893a435acdb9c864b369595a2b5e6745
- MD5 b425a00bf46f8a17a7fb09d43a34f777
- SHA1 6323b014fec81a320385c3199b8101251ea8e753
- SHA512 9bbfff4303ba5980df645a11ad02762eba4a04588e6e01efea9b8fb79516e5d98e8ac23ce6d4e227b582a022c7439a229dd348861faf915968fcaa9012470bce
- SSDEEP 98304:njBxcO4EY+ThmUv6qp7CtZNh7XE0t4tUpKjoUd:njBxcO4ONmq7CtF56tUpso6
- TLSH T15E569E22B298C0B5D4678075C57966B6D57CBC61873186CF3380BE3C7F36AD19A3A362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory