General
- Target 2026-07-15_1da948001c439c27ca6f9ba2fb0f584b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 31.7MB
- Sample260716-al7d6ahs5n
- SHA256 37dc789d01fdc7039d5923e556ba17add15036ed8ee6a4eed6f10be650233084
- MD5 1da948001c439c27ca6f9ba2fb0f584b
- SHA1 3cdf15b9df0a9932509cf3b29f6b0dd3ce2c1d09
- SHA512 64f61c9bf2b6b09a240770027eeef277cce35ee14c127f3d6966d1ce233d8381a15d1652e8d3736ba8b31267e1d067e91851c0623a18da898c5d4c92b5b97aab
- SSDEEP 393216:YjaZ/K0t6r1aUEtQevvqc2W1cpV2XI32i:XZ/K0t6r1VE8c23pV2X+T
- TLSH T11D776B91BAE483E2E3A6D53484B282B6FB717C0E1F31977B4179F21E1E376905D29321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_1da948001c439c27ca6f9ba2fb0f584b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_1da948001c439c27ca6f9ba2fb0f584b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_1da948001c439c27ca6f9ba2fb0f584b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 31.7MB
- SHA256 37dc789d01fdc7039d5923e556ba17add15036ed8ee6a4eed6f10be650233084
- MD5 1da948001c439c27ca6f9ba2fb0f584b
- SHA1 3cdf15b9df0a9932509cf3b29f6b0dd3ce2c1d09
- SHA512 64f61c9bf2b6b09a240770027eeef277cce35ee14c127f3d6966d1ce233d8381a15d1652e8d3736ba8b31267e1d067e91851c0623a18da898c5d4c92b5b97aab
- SSDEEP 393216:YjaZ/K0t6r1aUEtQevvqc2W1cpV2XI32i:XZ/K0t6r1VE8c23pV2X+T
- TLSH T11D776B91BAE483E2E3A6D53484B282B6FB717C0E1F31977B4179F21E1E376905D29321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application