General
- Target 2026-07-10_ad163f42b7d07b9b02419a77636b20fb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.6MB
- Sample260710-yewwvaav7s
- SHA256 def72d48d9b69f48bba5779d95d6273c635ef2b0655c515c5933e8ec0863fc47
- MD5 ad163f42b7d07b9b02419a77636b20fb
- SHA1 13886cded410645e53f96a9d67dcb81e1bd96c77
- SHA512 264c8808abab5071e91febc84bdfd479ef2bb59cb56ef6faf5131fb72bed07ad7bc381a810bdced1131335aee114552072305a5f24ae30a5a5f6445bb039718a
- SSDEEP 196608:l8Vb618U6D8Vb618U6q6/h1+E8Vb618U6D8Vb618U6q6/h1+z2Vh:2cpcLcpcRe
- TLSH T1F4179E17F69440F5D16AC47086A69736EA72BC420B319BCB4394F7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_ad163f42b7d07b9b02419a77636b20fb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_ad163f42b7d07b9b02419a77636b20fb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_ad163f42b7d07b9b02419a77636b20fb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.6MB
- SHA256 def72d48d9b69f48bba5779d95d6273c635ef2b0655c515c5933e8ec0863fc47
- MD5 ad163f42b7d07b9b02419a77636b20fb
- SHA1 13886cded410645e53f96a9d67dcb81e1bd96c77
- SHA512 264c8808abab5071e91febc84bdfd479ef2bb59cb56ef6faf5131fb72bed07ad7bc381a810bdced1131335aee114552072305a5f24ae30a5a5f6445bb039718a
- SSDEEP 196608:l8Vb618U6D8Vb618U6q6/h1+E8Vb618U6D8Vb618U6q6/h1+z2Vh:2cpcLcpcRe
- TLSH T1F4179E17F69440F5D16AC47086A69736EA72BC420B319BCB4394F7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry