General
- Target 2026-07-18_8c59ee5c1242de318bc668d5171dac37_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 68.8MB
- Sample260718-h1nvcsfs7z
- SHA256 5dceaec43e5c10a827a694c406007a9c209864af2185ae104e23280e0cacc598
- MD5 8c59ee5c1242de318bc668d5171dac37
- SHA1 547bb023d595c17379bfaf844d21870532485f01
- SHA512 a5cd5bedb6d1ce0d0452c1d6ae3adedd698a692dfe5f13484d6e50ff42110355364abf6b1efe8a4ade021c2f697a4b5600d728c13206a9dc5e673d91820209bd
- SSDEEP 393216:2cD2cD3cD2cDilucD2cD3cD2cDilPUEtQevvqc2W1cpV2XI32i:tZ4ZOllZ4ZOl8E8c23pV2X+T
- TLSH T17BF77C12B6E443E1E27A953485B68276EB727C0A0F3197EF4274F61E1E336D09E35722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_8c59ee5c1242de318bc668d5171dac37_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_8c59ee5c1242de318bc668d5171dac37_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_8c59ee5c1242de318bc668d5171dac37_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 68.8MB
- SHA256 5dceaec43e5c10a827a694c406007a9c209864af2185ae104e23280e0cacc598
- MD5 8c59ee5c1242de318bc668d5171dac37
- SHA1 547bb023d595c17379bfaf844d21870532485f01
- SHA512 a5cd5bedb6d1ce0d0452c1d6ae3adedd698a692dfe5f13484d6e50ff42110355364abf6b1efe8a4ade021c2f697a4b5600d728c13206a9dc5e673d91820209bd
- SSDEEP 393216:2cD2cD3cD2cDilucD2cD3cD2cDilPUEtQevvqc2W1cpV2XI32i:tZ4ZOllZ4ZOl8E8c23pV2X+T
- TLSH T17BF77C12B6E443E1E27A953485B68276EB727C0A0F3197EF4274F61E1E336D09E35722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry