General
- Target 2026-07-12_23fb4e4af9b7b9d1fec60647f48027e7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.9MB
- Sample260712-rap46sds51
- SHA256 4c1de637db20c0795d0175818049e6bb3bf3cd55cb1b47c02f4c2788f949559a
- MD5 23fb4e4af9b7b9d1fec60647f48027e7
- SHA1 3a647e4d4e0c8a2ff6d8c0a324d3bc002107fc07
- SHA512 6a1efd3a3a54280d10d27da1049c3c1d30588b74a0076623797c34f6dab9944a0b02f905782d7dfe8eb5482b955d3413b7f46852f2d737feccea5ca60d578bd5
- SSDEEP 98304:+e5x6c1QVb6ve5x6c1QVb6/GgHIKgMZjo:l8Vb6o8Vb6voK3o
- TLSH T155568D17F6A440F5D17AC57486969232EA727C520B309BCF4394F7192F33AE09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_23fb4e4af9b7b9d1fec60647f48027e7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_23fb4e4af9b7b9d1fec60647f48027e7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_23fb4e4af9b7b9d1fec60647f48027e7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.9MB
- SHA256 4c1de637db20c0795d0175818049e6bb3bf3cd55cb1b47c02f4c2788f949559a
- MD5 23fb4e4af9b7b9d1fec60647f48027e7
- SHA1 3a647e4d4e0c8a2ff6d8c0a324d3bc002107fc07
- SHA512 6a1efd3a3a54280d10d27da1049c3c1d30588b74a0076623797c34f6dab9944a0b02f905782d7dfe8eb5482b955d3413b7f46852f2d737feccea5ca60d578bd5
- SSDEEP 98304:+e5x6c1QVb6ve5x6c1QVb6/GgHIKgMZjo:l8Vb6o8Vb6voK3o
- TLSH T155568D17F6A440F5D17AC57486969232EA727C520B309BCF4394F7192F33AE09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry