General
- Target 2026-07-15_1bce497d5b3009a4f677e85df0f2e567_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 41.2MB
- Sample260716-amhgesht5l
- SHA256 68793b9d0940fc8e0f493d9e4e2d443baa5c2ff431f528392765f13324e4c1f5
- MD5 1bce497d5b3009a4f677e85df0f2e567
- SHA1 7a7dd1d58ecc23cfe70638ead90b1d09292c6399
- SHA512 55e67192b97c93ceac83bdb8203c167ffa2db1f07ad53a51c478da16c5d154bd9b1768a4af9e246006a5df7ee6d6c5503e3883e2d801243ef3ab523b3e5ead21
- SSDEEP 196608:l8Vb618U6D8Vb618U6q6/h1+E8Vb618U6D8Vb618U6q6/h1+z2VhF8Vb618U6D8D:2cpcLcpcReccpcGcpcLcpc5
- TLSH T15E979D17F69440F5D17A943086A69736EA72BC120B319BCB4394F7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_1bce497d5b3009a4f677e85df0f2e567_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_1bce497d5b3009a4f677e85df0f2e567_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_1bce497d5b3009a4f677e85df0f2e567_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 41.2MB
- SHA256 68793b9d0940fc8e0f493d9e4e2d443baa5c2ff431f528392765f13324e4c1f5
- MD5 1bce497d5b3009a4f677e85df0f2e567
- SHA1 7a7dd1d58ecc23cfe70638ead90b1d09292c6399
- SHA512 55e67192b97c93ceac83bdb8203c167ffa2db1f07ad53a51c478da16c5d154bd9b1768a4af9e246006a5df7ee6d6c5503e3883e2d801243ef3ab523b3e5ead21
- SSDEEP 196608:l8Vb618U6D8Vb618U6q6/h1+E8Vb618U6D8Vb618U6q6/h1+z2VhF8Vb618U6D8D:2cpcLcpcReccpcGcpcLcpc5
- TLSH T15E979D17F69440F5D17A943086A69736EA72BC120B319BCB4394F7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry