General
- Target 2026-07-13_6490c794ca0785d71b43ab2a915aeace_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 31.2MB
- Sample260714-bplsasb14l
- SHA256 23e85023a344c525cd2e6c20589c061cb98f17f43f493244485d7bc70eb08c0e
- MD5 6490c794ca0785d71b43ab2a915aeace
- SHA1 228f11409cedea49bab41563e77320656e229b76
- SHA512 735705789b3c7d0cc02c9d822405532e6c5949c7a3d713a20413d1596db36bcc56a30f3c05cae6177a2c757512259ecf4ff7c0656769d4981c8cc759a080487f
- SSDEEP 196608:l8Vb618L8Vb618A8Vb618L8Vb618A8Vb618L8Vb618Aro8Vb618L8Vb618A8Vb6U:2c7cSc7c6c7c7c7cSc7c6c7cPK
- TLSH T1C0777B16F6A540B5D16E9430CBA69232FA737C120B7097CB4394D62D2F336D0AE7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_6490c794ca0785d71b43ab2a915aeace_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_6490c794ca0785d71b43ab2a915aeace_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_6490c794ca0785d71b43ab2a915aeace_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 31.2MB
- SHA256 23e85023a344c525cd2e6c20589c061cb98f17f43f493244485d7bc70eb08c0e
- MD5 6490c794ca0785d71b43ab2a915aeace
- SHA1 228f11409cedea49bab41563e77320656e229b76
- SHA512 735705789b3c7d0cc02c9d822405532e6c5949c7a3d713a20413d1596db36bcc56a30f3c05cae6177a2c757512259ecf4ff7c0656769d4981c8cc759a080487f
- SSDEEP 196608:l8Vb618L8Vb618A8Vb618L8Vb618A8Vb618L8Vb618Aro8Vb618L8Vb618A8Vb6U:2c7cSc7c6c7c7c7cSc7c6c7cPK
- TLSH T1C0777B16F6A540B5D16E9430CBA69232FA737C120B7097CB4394D62D2F336D0AE7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application