General
- Target 2026-07-18_a70f2f41880bec7a8382b4baa02b7f82_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 22.9MB
- Sample260718-hj4t9aex2w
- SHA256 33027be74b22ac3349d5b06acde43f1c68dc77f8aa523bd97309a2cc44931f4e
- MD5 a70f2f41880bec7a8382b4baa02b7f82
- SHA1 3fe95fbd83738ac391da910af8713ebf5fe233d6
- SHA512 45a70dc8822bfb17f8b994149b18e55c879c9f48c6d1c22511ec86dc327d32190de7a1bb531782b4522f012b1ef03b52730035b997812101287638ce0129dded
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+fc8Vb618U68Vbb8Vb618U68VbCD:2cD2cD3cD2cDilP
- TLSH T18A378C16F6A445F5E17B99708AA69236EA327C520F30C7CF4354F61D2E336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_a70f2f41880bec7a8382b4baa02b7f82_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_a70f2f41880bec7a8382b4baa02b7f82_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_a70f2f41880bec7a8382b4baa02b7f82_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 22.9MB
- SHA256 33027be74b22ac3349d5b06acde43f1c68dc77f8aa523bd97309a2cc44931f4e
- MD5 a70f2f41880bec7a8382b4baa02b7f82
- SHA1 3fe95fbd83738ac391da910af8713ebf5fe233d6
- SHA512 45a70dc8822bfb17f8b994149b18e55c879c9f48c6d1c22511ec86dc327d32190de7a1bb531782b4522f012b1ef03b52730035b997812101287638ce0129dded
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+fc8Vb618U68Vbb8Vb618U68VbCD:2cD2cD3cD2cDilP
- TLSH T18A378C16F6A445F5E17B99708AA69236EA327C520F30C7CF4354F61D2E336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application