General
- Target 2026-07-10_c8e685fe8a7a9474d3fa13deedd50f04_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 31.3MB
- Sample260710-nl2essav6k
- SHA256 25d415fa853c609f55ea0d93e91fff307268c4280746e24f8aae6eebf43b7693
- MD5 c8e685fe8a7a9474d3fa13deedd50f04
- SHA1 042d2bd12eeb990e6f1541be0294605c5147b80e
- SHA512 3a896b7f7c465125e22f98e5f0df0fcefa31dfaa84df8fb7cc309c447cab74f7c38a3b94792217178d80450627d85bd31a1b13d9cbf2c1d2b0e7f9f6c3d6f751
- SSDEEP 196608:JtcIkGnk2VhptcIkGnk2VhZStcIkGnk2VhptcIkGnk2VhZ1C/h1+:I5Gkea5GkeP5Gkea5Gkex
- TLSH T14F777C16B2E440E5C19AC134CF568632E7B17C198BF197EB6251B6C92F33AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_c8e685fe8a7a9474d3fa13deedd50f04_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_c8e685fe8a7a9474d3fa13deedd50f04_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_c8e685fe8a7a9474d3fa13deedd50f04_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 31.3MB
- SHA256 25d415fa853c609f55ea0d93e91fff307268c4280746e24f8aae6eebf43b7693
- MD5 c8e685fe8a7a9474d3fa13deedd50f04
- SHA1 042d2bd12eeb990e6f1541be0294605c5147b80e
- SHA512 3a896b7f7c465125e22f98e5f0df0fcefa31dfaa84df8fb7cc309c447cab74f7c38a3b94792217178d80450627d85bd31a1b13d9cbf2c1d2b0e7f9f6c3d6f751
- SSDEEP 196608:JtcIkGnk2VhptcIkGnk2VhZStcIkGnk2VhptcIkGnk2VhZ1C/h1+:I5Gkea5GkeP5Gkea5Gkex
- TLSH T14F777C16B2E440E5C19AC134CF568632E7B17C198BF197EB6251B6C92F33AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application