General
- Target 2026-07-11_802fa76ee1c8506a1037ac97a71982ab_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.9MB
- Sample260711-tfw6saew2l
- SHA256 1e735ac714fc470ef20458e40a6f85f7d8b7365d6c5cc171ec66d7214c4925e5
- MD5 802fa76ee1c8506a1037ac97a71982ab
- SHA1 72be6d0adbdcba2ade26811edfd62ed85287b93b
- SHA512 0f9a4606cf4656985eea981e0363cbb663c06c14e0e4217727129b9f0ea1c4f10ddb40c76b23fc652bc9fb835228a1d94408e36ea796ad3696e1c57c6b352c53
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbfFiV+XenmE3/zHWJIUJ59PY9c:Su5x6M1pLapIkoq2Vjnm3G3K
- TLSH T137565B1676A440B4D1AAC534CF568635E3B17C248BF28BEB6111B6CD2F739D07E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_802fa76ee1c8506a1037ac97a71982ab_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_802fa76ee1c8506a1037ac97a71982ab_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_802fa76ee1c8506a1037ac97a71982ab_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.9MB
- SHA256 1e735ac714fc470ef20458e40a6f85f7d8b7365d6c5cc171ec66d7214c4925e5
- MD5 802fa76ee1c8506a1037ac97a71982ab
- SHA1 72be6d0adbdcba2ade26811edfd62ed85287b93b
- SHA512 0f9a4606cf4656985eea981e0363cbb663c06c14e0e4217727129b9f0ea1c4f10ddb40c76b23fc652bc9fb835228a1d94408e36ea796ad3696e1c57c6b352c53
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbfFiV+XenmE3/zHWJIUJ59PY9c:Su5x6M1pLapIkoq2Vjnm3G3K
- TLSH T137565B1676A440B4D1AAC534CF568635E3B17C248BF28BEB6111B6CD2F739D07E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry