General
- Target 2026-07-14_e8679862c57978895e0ff1b79a249356_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 14.1MB
- Sample260714-dar2waez71
- SHA256 e343c4086912fb4dcf5c963c20d0a1eb35b3da796007f2c4e1cd5e87304508b0
- MD5 e8679862c57978895e0ff1b79a249356
- SHA1 b40c83a295a0803718d2207f83c2087ecb3bf4b7
- SHA512 b6b9b1c5265baa35b226e03158385a00eb37f28b1dbb9ede2d9c4290e484f22968eb80057e4ff5d039007d0233997ed5ae4aadd49abeedbdc20828f4fb1ac6ec
- SSDEEP 98304:Su5x6M1pLapIkoq2Vjnmd+YPppCpU2hyu5x6M1pLapIkoq2Vjnmd+YPppCpU2hE:JtcIkGnk2VhptcIkGnk2VhE
- TLSH T124E66C16B2E440E4C19AC134CF568632E7B17C198BF197EB6251B6C92F33AD07B3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_e8679862c57978895e0ff1b79a249356_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_e8679862c57978895e0ff1b79a249356_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_e8679862c57978895e0ff1b79a249356_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 14.1MB
- SHA256 e343c4086912fb4dcf5c963c20d0a1eb35b3da796007f2c4e1cd5e87304508b0
- MD5 e8679862c57978895e0ff1b79a249356
- SHA1 b40c83a295a0803718d2207f83c2087ecb3bf4b7
- SHA512 b6b9b1c5265baa35b226e03158385a00eb37f28b1dbb9ede2d9c4290e484f22968eb80057e4ff5d039007d0233997ed5ae4aadd49abeedbdc20828f4fb1ac6ec
- SSDEEP 98304:Su5x6M1pLapIkoq2Vjnmd+YPppCpU2hyu5x6M1pLapIkoq2Vjnmd+YPppCpU2hE:JtcIkGnk2VhptcIkGnk2VhE
- TLSH T124E66C16B2E440E4C19AC134CF568632E7B17C198BF197EB6251B6C92F33AD07B3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry