General
- Target 2026-07-16_3110c1ae047e95759a167b72ca3c8f38_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 4.1MB
- Sample260716-e57w9agw2z
- SHA256 97386d05df8d5cb0ebe4e3b97aafcc31b3cfa367a817600bfba167239044e448
- MD5 3110c1ae047e95759a167b72ca3c8f38
- SHA1 c1b8a575b80b88734ec336657e2c3663d545ba1f
- SHA512 390357b8f21da83ed8df56cd51d9f5077563b77b303001b506c35b829130d6f35ed343e6a5a233c9489a19ec4e14d4cc4901791727df15dec901f9f54d5883b9
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbfFiV+Xep:Su5x6M1pLapIkoq2Vjp
- TLSH T119165C2671E540A5C1A9C134CF568732E3F17C298BF1D7EBA111B6CA2F339D07A3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_3110c1ae047e95759a167b72ca3c8f38_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_3110c1ae047e95759a167b72ca3c8f38_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_3110c1ae047e95759a167b72ca3c8f38_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 4.1MB
- SHA256 97386d05df8d5cb0ebe4e3b97aafcc31b3cfa367a817600bfba167239044e448
- MD5 3110c1ae047e95759a167b72ca3c8f38
- SHA1 c1b8a575b80b88734ec336657e2c3663d545ba1f
- SHA512 390357b8f21da83ed8df56cd51d9f5077563b77b303001b506c35b829130d6f35ed343e6a5a233c9489a19ec4e14d4cc4901791727df15dec901f9f54d5883b9
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbfFiV+Xep:Su5x6M1pLapIkoq2Vjp
- TLSH T119165C2671E540A5C1A9C134CF568732E3F17C298BF1D7EBA111B6CA2F339D07A3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry