General
- Target 2026-07-12_c9625a87e0eb9cd5d2cbb1382589f804_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 7.4MB
- Sample260712-y9vbhaav5s
- SHA256 b2cc3130e130a0765013d997bd388ef9e81bed96e987560735ffe0a6ce6403e1
- MD5 c9625a87e0eb9cd5d2cbb1382589f804
- SHA1 7d91e309c057ffb6f0a5e3101edd1c379cd59833
- SHA512 45809b5a3b4cedf58179aa26f0bd2c1aa000b8bd9843d7c98560d9740878ee6f914080c55b57ac208b61bc3a67ac44d7c4678d3559f4f0927f13b306b6c083b9
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbfFiV+XenmE3/zHWJIUJ59PY4F:Su5x6M1pLapIkoq2Vjnm3L2eQuLapI9
- TLSH T1D6765B2672E540A5C1AA8134CF568631E3F17C698FF1D3EBA115B2C92F339D07A3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_c9625a87e0eb9cd5d2cbb1382589f804_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_c9625a87e0eb9cd5d2cbb1382589f804_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_c9625a87e0eb9cd5d2cbb1382589f804_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 7.4MB
- SHA256 b2cc3130e130a0765013d997bd388ef9e81bed96e987560735ffe0a6ce6403e1
- MD5 c9625a87e0eb9cd5d2cbb1382589f804
- SHA1 7d91e309c057ffb6f0a5e3101edd1c379cd59833
- SHA512 45809b5a3b4cedf58179aa26f0bd2c1aa000b8bd9843d7c98560d9740878ee6f914080c55b57ac208b61bc3a67ac44d7c4678d3559f4f0927f13b306b6c083b9
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbfFiV+XenmE3/zHWJIUJ59PY4F:Su5x6M1pLapIkoq2Vjnm3L2eQuLapI9
- TLSH T1D6765B2672E540A5C1AA8134CF568631E3F17C698FF1D3EBA115B2C92F339D07A3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry