General
- Target 2026-07-12_8f5209034b0474e4e93d02122611a03b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 25.6MB
- Sample260712-pjg4tabx6s
- SHA256 a7a5b33a7ad6daa8ded4b53eb4cf40c774f6d58ca17fb01701565b07618cce3b
- MD5 8f5209034b0474e4e93d02122611a03b
- SHA1 8818d6dd82122e566d35267f7dedeaa81b93aeba
- SHA512 f9eb5935a02cefd34de754b4b6c89fcb18bad613b89f6f09f862d3caaf96ed348667c901357be14330eb3cc3fa0de129e66cbc09737babcb044a61c3c058b46c
- SSDEEP 196608:l8Vb618L8Vb618D/h1+E8Vb618L8Vb618D/h1+joKHO8Vb618L8Vb618D/h1+E8b:2c7cxc7cXo0c7cxc7cXo
- TLSH T1D5477B17F6A440F5D06AD574C6969636FA337C120B709ACB4394F62D2F336D0AE3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_8f5209034b0474e4e93d02122611a03b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_8f5209034b0474e4e93d02122611a03b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_8f5209034b0474e4e93d02122611a03b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 25.6MB
- SHA256 a7a5b33a7ad6daa8ded4b53eb4cf40c774f6d58ca17fb01701565b07618cce3b
- MD5 8f5209034b0474e4e93d02122611a03b
- SHA1 8818d6dd82122e566d35267f7dedeaa81b93aeba
- SHA512 f9eb5935a02cefd34de754b4b6c89fcb18bad613b89f6f09f862d3caaf96ed348667c901357be14330eb3cc3fa0de129e66cbc09737babcb044a61c3c058b46c
- SSDEEP 196608:l8Vb618L8Vb618D/h1+E8Vb618L8Vb618D/h1+joKHO8Vb618L8Vb618D/h1+E8b:2c7cxc7cXo0c7cxc7cXo
- TLSH T1D5477B17F6A440F5D06AD574C6969636FA337C120B709ACB4394F62D2F336D0AE3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry