General
- Target 2026-07-18_4152579bee3f802bd759c250a1159783_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 24.9MB
- Sample260718-j478vadv9n
- SHA256 61e368f8fde8966f6cc5f80dcc8bf956e10f7fcb59fd510b2711dd37b3593981
- MD5 4152579bee3f802bd759c250a1159783
- SHA1 570f5e33c539e678f30dfac38b9f1ca8baf25f77
- SHA512 7b6e56b814b4d3e88f98033e067002613a14c0057b2bf0c1109a1543349071edb2711c509a56dc55f64e1a3e98647c7b6cecb77a4e8f0d085180bb562353502e
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+fc8Vb618U68Vbb8Vb618U68VbCF:2cD2cD3cD2cDjKyG
- TLSH T17B478C16B6E441B5E1BAD5748AA68636EA727C120F30C7CF4354F61D2F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_4152579bee3f802bd759c250a1159783_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_4152579bee3f802bd759c250a1159783_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_4152579bee3f802bd759c250a1159783_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 24.9MB
- SHA256 61e368f8fde8966f6cc5f80dcc8bf956e10f7fcb59fd510b2711dd37b3593981
- MD5 4152579bee3f802bd759c250a1159783
- SHA1 570f5e33c539e678f30dfac38b9f1ca8baf25f77
- SHA512 7b6e56b814b4d3e88f98033e067002613a14c0057b2bf0c1109a1543349071edb2711c509a56dc55f64e1a3e98647c7b6cecb77a4e8f0d085180bb562353502e
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+fc8Vb618U68Vbb8Vb618U68VbCF:2cD2cD3cD2cDjKyG
- TLSH T17B478C16B6E441B5E1BAD5748AA68636EA727C120F30C7CF4354F61D2F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application