General
- Target 2026-07-14_b56f1f7e48dcf3a9bae5bb78c69e82a0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 21.1MB
- Sample260714-1ffblagt6x
- SHA256 261137bcd7d13bb76f084b18f2d9b7e37c078153ee7a72e92eddfea609ff8d2a
- MD5 b56f1f7e48dcf3a9bae5bb78c69e82a0
- SHA1 486195cddd628b2f8c3a14ea7c6ffb1057fbb43c
- SHA512 3e707136753632242ac2508bd0dc0dd9c94ea98b7132a8288b41e31b134b34c2fa3de1b1c2ded48ac3ad082389c57fd8259078dc05452ab1bb93accf04544e28
- SSDEEP 196608:l8Vb618U6D8Vb618U6a2VhF8Vb618U6D8Vb618U6a2VhkKz:2cpcveccpcveCK
- TLSH T191279D17F69540F5D16AD4308B5A9332EAB2BC520B3197CB4390F6592F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_b56f1f7e48dcf3a9bae5bb78c69e82a0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_b56f1f7e48dcf3a9bae5bb78c69e82a0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_b56f1f7e48dcf3a9bae5bb78c69e82a0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 21.1MB
- SHA256 261137bcd7d13bb76f084b18f2d9b7e37c078153ee7a72e92eddfea609ff8d2a
- MD5 b56f1f7e48dcf3a9bae5bb78c69e82a0
- SHA1 486195cddd628b2f8c3a14ea7c6ffb1057fbb43c
- SHA512 3e707136753632242ac2508bd0dc0dd9c94ea98b7132a8288b41e31b134b34c2fa3de1b1c2ded48ac3ad082389c57fd8259078dc05452ab1bb93accf04544e28
- SSDEEP 196608:l8Vb618U6D8Vb618U6a2VhF8Vb618U6D8Vb618U6a2VhkKz:2cpcveccpcveCK
- TLSH T191279D17F69540F5D16AD4308B5A9332EAB2BC520B3197CB4390F6592F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry