General
- Target 2026-07-16_025edf911482ea3192f5c7b164158eb4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 18.1MB
- Sample260716-kdwmssct2v
- SHA256 177204f9cb45db8250c47e68a5ca70c340c2e435b7a669057cdd5d211a986c6a
- MD5 025edf911482ea3192f5c7b164158eb4
- SHA1 847c960b68c78a2dd62d266ea1784d28f3942fee
- SHA512 a0b553aa40a5aba528c04495384727d52a82eb9d1251f85d1f81cbb6f962b342be03b3cc231b9b7a4157051db2e4d8a3b6a80d2a2b2d6e35a1fc23d01571e8b7
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+RjRUZ/K0t6rXld6lw/h1+Qw/h1+8w/h1+Qw/h1+u:YjaZ/K0t6r1njaZ/K0t6r1
- TLSH T104177C56F5A081B1D076C474C5D6A776EA32BC411B308BCB9346EB282E376D09F3A736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_025edf911482ea3192f5c7b164158eb4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_025edf911482ea3192f5c7b164158eb4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_025edf911482ea3192f5c7b164158eb4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 18.1MB
- SHA256 177204f9cb45db8250c47e68a5ca70c340c2e435b7a669057cdd5d211a986c6a
- MD5 025edf911482ea3192f5c7b164158eb4
- SHA1 847c960b68c78a2dd62d266ea1784d28f3942fee
- SHA512 a0b553aa40a5aba528c04495384727d52a82eb9d1251f85d1f81cbb6f962b342be03b3cc231b9b7a4157051db2e4d8a3b6a80d2a2b2d6e35a1fc23d01571e8b7
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+RjRUZ/K0t6rXld6lw/h1+Qw/h1+8w/h1+Qw/h1+u:YjaZ/K0t6r1njaZ/K0t6r1
- TLSH T104177C56F5A081B1D076C474C5D6A776EA32BC411B308BCB9346EB282E376D09F3A736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry