General
- Target 2026-07-13_4ea66e2e480c4da2e8b2fbf27698b912_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.2MB
- Sample260714-btlcbsb19r
- SHA256 6038779fc69fd2bb8ebd83b74df139b8136e672f4e82a71e5b1bac44be11ff13
- MD5 4ea66e2e480c4da2e8b2fbf27698b912
- SHA1 1d61f3aac7f6d8ae44096556f681b154a06bea4f
- SHA512 6203ca90be0e57dc3081e9e06a7659704230245e2c98afccbb719175a9c99c45ca974b5c1998fe2cbac3d1f40a212fb6e987916ecdc68740f7236049c6eec157
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qX5LapIFoq2Vjnma/h1+iu5x6M1WoDxhD:Qi8kLri8kLh5cIFGn//h1+5ioKzOGns
- TLSH T124F68E1672E440A5D1AAC534CB668632E7B17C554FB0D7DF5251B29E2E33BC0BA3A323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_4ea66e2e480c4da2e8b2fbf27698b912_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_4ea66e2e480c4da2e8b2fbf27698b912_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_4ea66e2e480c4da2e8b2fbf27698b912_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.2MB
- SHA256 6038779fc69fd2bb8ebd83b74df139b8136e672f4e82a71e5b1bac44be11ff13
- MD5 4ea66e2e480c4da2e8b2fbf27698b912
- SHA1 1d61f3aac7f6d8ae44096556f681b154a06bea4f
- SHA512 6203ca90be0e57dc3081e9e06a7659704230245e2c98afccbb719175a9c99c45ca974b5c1998fe2cbac3d1f40a212fb6e987916ecdc68740f7236049c6eec157
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qX5LapIFoq2Vjnma/h1+iu5x6M1WoDxhD:Qi8kLri8kLh5cIFGn//h1+5ioKzOGns
- TLSH T124F68E1672E440A5D1AAC534CB668632E7B17C554FB0D7DF5251B29E2E33BC0BA3A323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry