General
- Target 2026-07-13_c79c91690412e8d2d62ef4dbafe3dab4_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry
- Size 15.0MB
- Sample260713-vpgccscv6m
- SHA256 952daa51ad5cc7d0749d9c3ec7bb65f1dd92ded03b93b090dc1d3cb145e4c601
- MD5 c79c91690412e8d2d62ef4dbafe3dab4
- SHA1 a913ddcd6fd083b437506b3f9188277db99261fb
- SHA512 a7ac9ca5171c6f6ec26f5f5d1fe8b8d09b7beb6c2e4e3e66b46bbc2d64afbf16cffc19fd3a5813336b8918c459167de9c3402abb2793b2db4949c0316652f90c
- SSDEEP 196608:l8Vb618L8Vb618A8Vb618L8Vb618A8Vb618L8Vb618Ar:2c7cSc7c6c7c
- TLSH T112F67C16E6A440F5D16E9434C7A69632FA7378120B709BCB43D4C62D2F336D0AE7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_c79c91690412e8d2d62ef4dbafe3dab4_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_c79c91690412e8d2d62ef4dbafe3dab4_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_c79c91690412e8d2d62ef4dbafe3dab4_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry
- Size 15.0MB
- SHA256 952daa51ad5cc7d0749d9c3ec7bb65f1dd92ded03b93b090dc1d3cb145e4c601
- MD5 c79c91690412e8d2d62ef4dbafe3dab4
- SHA1 a913ddcd6fd083b437506b3f9188277db99261fb
- SHA512 a7ac9ca5171c6f6ec26f5f5d1fe8b8d09b7beb6c2e4e3e66b46bbc2d64afbf16cffc19fd3a5813336b8918c459167de9c3402abb2793b2db4949c0316652f90c
- SSDEEP 196608:l8Vb618L8Vb618A8Vb618L8Vb618A8Vb618L8Vb618Ar:2c7cSc7c6c7c
- TLSH T112F67C16E6A440F5D16E9434C7A69632FA7378120B709BCB43D4C62D2F336D0AE7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry