General
- Target 2026-07-12_21d2f4e0b10f8e0fe5ce4520517981a6_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 25.4MB
- Sample260712-rb1x3abs3q
- SHA256 32629e0e9f5655767b4bfb660de411be1219abc091ef5afed3ccbed8466da130
- MD5 21d2f4e0b10f8e0fe5ce4520517981a6
- SHA1 de54d0fee8f32cf4f43aad796eddafb9651b8950
- SHA512 90a9bae2f5fe6880176c4597c72865017c61813c3175a94100f168583ba89ee6b6330d8e0fd8fbf542da14f9a9f91d5dd0ca3042d4151ecfa32c93ffd1b16059
- SSDEEP 196608:l8Vb618U68Vb618US18U9o8Vb6hGnM8Vb618U68Vb618US18U9o8Vb6hGnroKA/G:2cDcy7wGtcDcy7wGro
- TLSH T1D8478D16B6A881F5D0BAC57486969636FA727C020B309BDF4354F71D2E33AD09F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_21d2f4e0b10f8e0fe5ce4520517981a6_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_21d2f4e0b10f8e0fe5ce4520517981a6_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_21d2f4e0b10f8e0fe5ce4520517981a6_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 25.4MB
- SHA256 32629e0e9f5655767b4bfb660de411be1219abc091ef5afed3ccbed8466da130
- MD5 21d2f4e0b10f8e0fe5ce4520517981a6
- SHA1 de54d0fee8f32cf4f43aad796eddafb9651b8950
- SHA512 90a9bae2f5fe6880176c4597c72865017c61813c3175a94100f168583ba89ee6b6330d8e0fd8fbf542da14f9a9f91d5dd0ca3042d4151ecfa32c93ffd1b16059
- SSDEEP 196608:l8Vb618U68Vb618US18U9o8Vb6hGnM8Vb618U68Vb618US18U9o8Vb6hGnroKA/G:2cDcy7wGtcDcy7wGro
- TLSH T1D8478D16B6A881F5D0BAC57486969636FA727C020B309BDF4354F71D2E33AD09F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application