General
- Target 2026-07-11_82b6f5d1841e0ec4557ccb8140c96204_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_stealc_vidar
- Size 15.8MB
- Sample260711-de2f4say2r
- SHA256 ffd8bb8d457adeed1b51d47bd403603bc61eb0eb2d1042093545277ebee0fb18
- MD5 82b6f5d1841e0ec4557ccb8140c96204
- SHA1 d634a7d085dbdd0e3a37fd8074aa69b825722d70
- SHA512 893847d06f49867e2f323e0a1e44b80b12d5bba0ffb0c028e777b71b345fc2583b108c166666d858a7c97caa609a13b60346441c02f8b4f096d617b2578cb8b6
- SSDEEP 196608:cNne7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTou7:keahvQHrc8u3xXJ/f4uUWHI
- TLSH T193F68C23B24681E6C02AE2B8CB474372D6B57C544360A7DB22D5BB293F33BE4577A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-11_82b6f5d1841e0ec4557ccb8140c96204_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_82b6f5d1841e0ec4557ccb8140c96204_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_82b6f5d1841e0ec4557ccb8140c96204_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_stealc_vidar
- Size 15.8MB
- SHA256 ffd8bb8d457adeed1b51d47bd403603bc61eb0eb2d1042093545277ebee0fb18
- MD5 82b6f5d1841e0ec4557ccb8140c96204
- SHA1 d634a7d085dbdd0e3a37fd8074aa69b825722d70
- SHA512 893847d06f49867e2f323e0a1e44b80b12d5bba0ffb0c028e777b71b345fc2583b108c166666d858a7c97caa609a13b60346441c02f8b4f096d617b2578cb8b6
- SSDEEP 196608:cNne7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTou7:keahvQHrc8u3xXJ/f4uUWHI
- TLSH T193F68C23B24681E6C02AE2B8CB474372D6B57C544360A7DB22D5BB293F33BE4577A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Detects executables packed with SmartAssembly
-
Detects executables packed with Yano Obfuscator
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.