General
- Target 2026-07-11_1d9fed41fa7d07f5751ff3b4dc0558e5_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_stealc_vidar
- Size 15.5MB
- Sample260711-dp572sds8w
- SHA256 83fce989d52f835acb20d2f38096eb56a5018693237a93b94d7babab7837104b
- MD5 1d9fed41fa7d07f5751ff3b4dc0558e5
- SHA1 fa3fbec1b3185040b0f055dbe0226aaaf6f71e77
- SHA512 4ebcefa9842ba1c4265ea7803e318ddaf3496ad272c13f498a8ecac18429dd1f329641d521ed75c9f9e534c577d7c4d5e466b3b0200ad65ba77ae169c82e6f4b
- SSDEEP 196608:HNMe7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTouP:2eahvQHrc8u3xXJ/f4uUWHs
- TLSH T158F69D17B35681E6C02AE2B88A474323E7B5BC440330A7DB16D5BB692F77BE4573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-11_1d9fed41fa7d07f5751ff3b4dc0558e5_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_1d9fed41fa7d07f5751ff3b4dc0558e5_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_1d9fed41fa7d07f5751ff3b4dc0558e5_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_stealc_vidar
- Size 15.5MB
- SHA256 83fce989d52f835acb20d2f38096eb56a5018693237a93b94d7babab7837104b
- MD5 1d9fed41fa7d07f5751ff3b4dc0558e5
- SHA1 fa3fbec1b3185040b0f055dbe0226aaaf6f71e77
- SHA512 4ebcefa9842ba1c4265ea7803e318ddaf3496ad272c13f498a8ecac18429dd1f329641d521ed75c9f9e534c577d7c4d5e466b3b0200ad65ba77ae169c82e6f4b
- SSDEEP 196608:HNMe7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTouP:2eahvQHrc8u3xXJ/f4uUWHs
- TLSH T158F69D17B35681E6C02AE2B88A474323E7B5BC440330A7DB16D5BB692F77BE4573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables packed with Dotfuscator
- Custom signature
Detects executables packed with SmartAssembly
- Custom signature
Detects executables packed with Yano Obfuscator
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.