General
- Target 2026-07-16_4f94b642a86e99076590484ebd025337_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.2MB
- Sample260716-e4qatagv6s
- SHA256 274331004c6d72e0ee82c4dfbc0b034e287422a232f15144091b6d7b6cfa2d08
- MD5 4f94b642a86e99076590484ebd025337
- SHA1 5cc366ec5f49160b43ea2db88ca698041f49dc01
- SHA512 3c82b14c420707472aac3c224958782720ca68c23b65d220868a54230aedcc1433f1ac725862bd6102e51cb9781c57afa6f3f4f63fa54dd30370614a88003868
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxGu5x6M1pLapIkoq2VjnmxVRQ:JtcIkGnkdtcIkGnkVa
- TLSH T145B66C2671E440A5C1A9C134CF568632E3B27C298FF097EBA255B2DD1F336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_4f94b642a86e99076590484ebd025337_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_4f94b642a86e99076590484ebd025337_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_4f94b642a86e99076590484ebd025337_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.2MB
- SHA256 274331004c6d72e0ee82c4dfbc0b034e287422a232f15144091b6d7b6cfa2d08
- MD5 4f94b642a86e99076590484ebd025337
- SHA1 5cc366ec5f49160b43ea2db88ca698041f49dc01
- SHA512 3c82b14c420707472aac3c224958782720ca68c23b65d220868a54230aedcc1433f1ac725862bd6102e51cb9781c57afa6f3f4f63fa54dd30370614a88003868
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxGu5x6M1pLapIkoq2VjnmxVRQ:JtcIkGnkdtcIkGnkVa
- TLSH T145B66C2671E440A5C1A9C134CF568632E3B27C298FF097EBA255B2DD1F336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry