General
- Target 2026-07-13_d4448df5de39fda573d8d17bf146c5cd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 21.1MB
- Sample260714-aw2awsbv2q
- SHA256 ecda9a6031bbddab1ff2b53092774ef697e410107468c50961e12be39b320364
- MD5 d4448df5de39fda573d8d17bf146c5cd
- SHA1 1288a865ff833048555c0ff50f56c2c593a6869a
- SHA512 b7df1d166a79b70b36fb363c12d92715cf871968661fa676dd7e5daefe935da3d91f4908baa29937ecfa51a2adcc8cd2e0bf6816f07b5c6eee872cdcafa791a2
- SSDEEP 196608:l8Vb618U6D8Vb618U6a2VhF8Vb618U6D8Vb618U6a2VhkKz:2cpcveccpcveCK
- TLSH T1E9279D17F69540F5D16AD4308B5A9332EAB2BC520B3197CB4390F6592F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_d4448df5de39fda573d8d17bf146c5cd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_d4448df5de39fda573d8d17bf146c5cd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_d4448df5de39fda573d8d17bf146c5cd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 21.1MB
- SHA256 ecda9a6031bbddab1ff2b53092774ef697e410107468c50961e12be39b320364
- MD5 d4448df5de39fda573d8d17bf146c5cd
- SHA1 1288a865ff833048555c0ff50f56c2c593a6869a
- SHA512 b7df1d166a79b70b36fb363c12d92715cf871968661fa676dd7e5daefe935da3d91f4908baa29937ecfa51a2adcc8cd2e0bf6816f07b5c6eee872cdcafa791a2
- SSDEEP 196608:l8Vb618U6D8Vb618U6a2VhF8Vb618U6D8Vb618U6a2VhkKz:2cpcveccpcveCK
- TLSH T1E9279D17F69540F5D16AD4308B5A9332EAB2BC520B3197CB4390F6592F33AD06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application