General
- Target 2026-07-15_c27beb37adc88c10f248beea18dd64b0_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 3.4MB
- Sample260715-lds3cagv2m
- SHA256 799d2bbf1e3f0d35d662e828a5340b1678c13bec33cdd835c7c93ea5667aa777
- MD5 c27beb37adc88c10f248beea18dd64b0
- SHA1 ee3cd4bb818e93403e658b4439b89dd647581902
- SHA512 d25fe29e5529c999a14593750f66291c4a3d4cdbb7c333454d7a1e08be9bacdd86082b03e11d76224dcd3d43bcea4b4b13b994c1f69afd4fed498fd0ca63f252
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatglL3hpYqaxpYq:7ID41qW1PszVW6Hx6
- TLSH T12EF57C02F7A48572D073413589A792A6EF7278411F308BCF1388A67D6F337D1AA36766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_c27beb37adc88c10f248beea18dd64b0_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_c27beb37adc88c10f248beea18dd64b0_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_c27beb37adc88c10f248beea18dd64b0_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 3.4MB
- SHA256 799d2bbf1e3f0d35d662e828a5340b1678c13bec33cdd835c7c93ea5667aa777
- MD5 c27beb37adc88c10f248beea18dd64b0
- SHA1 ee3cd4bb818e93403e658b4439b89dd647581902
- SHA512 d25fe29e5529c999a14593750f66291c4a3d4cdbb7c333454d7a1e08be9bacdd86082b03e11d76224dcd3d43bcea4b4b13b994c1f69afd4fed498fd0ca63f252
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatglL3hpYqaxpYq:7ID41qW1PszVW6Hx6
- TLSH T12EF57C02F7A48572D073413589A792A6EF7278411F308BCF1388A67D6F337D1AA36766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory