General
- Target 2026-07-10_5897bc2e5b09fa98838cbaeb14aaff3b_amadey_elex_emotet_glassworm_icedid_njrat_remcos
- Size 2.6MB
- Sample260710-y7brdabs2w
- SHA256 292f4fd50d093d016f5a540d91ffc43986292267628646adf2790320d388b659
- MD5 5897bc2e5b09fa98838cbaeb14aaff3b
- SHA1 28b714f85a737d3de21af2f300c87c7dcfe5d00a
- SHA512 1aa42130caa12c4b48cff3aa98acc4e7b76ece95039440f1ad5eb413917153abc04306dff600f2d340899d3f16559f4d87ff8379d75338f239496c7f678f6228
- SSDEEP 49152:poRg5x6c1fHLfU5nRdHnWRHcfXb+N/7t0i0FIVO88hXl+:+e5x6c1QVb6A/h1+
- TLSH T1F7C58C26F6A481B1E176C474C5E6A776EB3278420B318BCB5355C72C2F236D19E3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_5897bc2e5b09fa98838cbaeb14aaff3b_amadey_elex_emotet_glassworm_icedid_njrat_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_5897bc2e5b09fa98838cbaeb14aaff3b_amadey_elex_emotet_glassworm_icedid_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_5897bc2e5b09fa98838cbaeb14aaff3b_amadey_elex_emotet_glassworm_icedid_njrat_remcos
- Size 2.6MB
- SHA256 292f4fd50d093d016f5a540d91ffc43986292267628646adf2790320d388b659
- MD5 5897bc2e5b09fa98838cbaeb14aaff3b
- SHA1 28b714f85a737d3de21af2f300c87c7dcfe5d00a
- SHA512 1aa42130caa12c4b48cff3aa98acc4e7b76ece95039440f1ad5eb413917153abc04306dff600f2d340899d3f16559f4d87ff8379d75338f239496c7f678f6228
- SSDEEP 49152:poRg5x6c1fHLfU5nRdHnWRHcfXb+N/7t0i0FIVO88hXl+:+e5x6c1QVb6A/h1+
- TLSH T1F7C58C26F6A481B1E176C474C5E6A776EB3278420B318BCB5355C72C2F236D19E3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry