General
- Target 2026-07-15_b32297edea67abedb2b4daa6e632b047_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 44.3MB
- Sample260715-3fefeafz3m
- SHA256 17cd3190bf7c8aa3851254fa10a3c1b7fd85f4fe871cd00f5e8fe5970ed1821a
- MD5 b32297edea67abedb2b4daa6e632b047
- SHA1 0f3520d42cc7b24b9c4bfd7bc19f4ba664d5dc09
- SHA512 48908c372888704922b53dc278b5052fbc08ed66240f8378f421125dc2005e11e6b91c741b810c5c83a11be0e1252e9bf88eec2aed038b480b0b49e8067c6efa
- SSDEEP 196608:l8Vb618U6D8Vb618U6q6/h1+E8Vb618U6D8Vb618U6q6/h1+z2VhF8Vb618U6D8u:2cpcLcpcReccpcGcpcLcpcRej
- TLSH T167A79E17F69440F5D16AD47086A69736EA72BC020B319BCB4394F7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_b32297edea67abedb2b4daa6e632b047_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_b32297edea67abedb2b4daa6e632b047_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_b32297edea67abedb2b4daa6e632b047_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 44.3MB
- SHA256 17cd3190bf7c8aa3851254fa10a3c1b7fd85f4fe871cd00f5e8fe5970ed1821a
- MD5 b32297edea67abedb2b4daa6e632b047
- SHA1 0f3520d42cc7b24b9c4bfd7bc19f4ba664d5dc09
- SHA512 48908c372888704922b53dc278b5052fbc08ed66240f8378f421125dc2005e11e6b91c741b810c5c83a11be0e1252e9bf88eec2aed038b480b0b49e8067c6efa
- SSDEEP 196608:l8Vb618U6D8Vb618U6q6/h1+E8Vb618U6D8Vb618U6q6/h1+z2VhF8Vb618U6D8u:2cpcLcpcReccpcGcpcLcpcRej
- TLSH T167A79E17F69440F5D16AD47086A69736EA72BC020B319BCB4394F7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application