General
- Target 2026-07-14_7076352b106d0c5f1f6dc43f37c4ca8c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 30.5MB
- Sample260714-1y672aev9n
- SHA256 efbef4ba73ddd8f1d149cb06db06e6037f8fd59e3c1e097c986c2035bc6968b0
- MD5 7076352b106d0c5f1f6dc43f37c4ca8c
- SHA1 a77f5addef6138b7d10837ec08a020893cbb211c
- SHA512 f320cae178846391ad96cd962ff3dbf393fc4c3f953c8a3ac640e4d5b206ae1928a0273641f3d6209d2e145b48885da866541974c5b5d867f7503539751f7d56
- SSDEEP 196608:l8Vb618U6D8Vb618U6q6/h1+E8Vb618U6D8Vb618U6q6/h1+z2VhF8Vb618U6D8H:2cpcLcpcReccpcLcT
- TLSH T1CF679E17F69440F5D16AD47086A69736EA72BC020B319BCB4394F7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_7076352b106d0c5f1f6dc43f37c4ca8c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_7076352b106d0c5f1f6dc43f37c4ca8c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_7076352b106d0c5f1f6dc43f37c4ca8c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 30.5MB
- SHA256 efbef4ba73ddd8f1d149cb06db06e6037f8fd59e3c1e097c986c2035bc6968b0
- MD5 7076352b106d0c5f1f6dc43f37c4ca8c
- SHA1 a77f5addef6138b7d10837ec08a020893cbb211c
- SHA512 f320cae178846391ad96cd962ff3dbf393fc4c3f953c8a3ac640e4d5b206ae1928a0273641f3d6209d2e145b48885da866541974c5b5d867f7503539751f7d56
- SSDEEP 196608:l8Vb618U6D8Vb618U6q6/h1+E8Vb618U6D8Vb618U6q6/h1+z2VhF8Vb618U6D8H:2cpcLcpcReccpcLcT
- TLSH T1CF679E17F69440F5D16AD47086A69736EA72BC020B319BCB4394F7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry