General
- Target 2026-07-18_2edd7c132557a5fb7652a998da02743a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 53.2MB
- Sample260718-kdbbvsdy8l
- SHA256 406ed897aa5c603725fae560a900b370841511c524ba6dd8b6d0249611b13163
- MD5 2edd7c132557a5fb7652a998da02743a
- SHA1 edd0f6c4bf82aa7ec9ff20197a47f22658ebdc71
- SHA512 caee4ca305bdd3c81e36a67ec19e4804f56bacacfabe105f48cd285dbaac74c9b82c79c9c2634506e031a8f90e8a31804bb1a1e90ed6cba2103bd3ab62d6598f
- SSDEEP 393216:I5G+ob5G+oo5G+ob5G+oD5G+ob5G+oo5G+ob5G+oCoO:I47b47o47b47D47b47o47b47CoO
- TLSH T1ACC75A16B6E440E5C1AAC134CF568632E7B17C294FF097EB6255B2C92E33AD07E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_2edd7c132557a5fb7652a998da02743a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_2edd7c132557a5fb7652a998da02743a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_2edd7c132557a5fb7652a998da02743a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 53.2MB
- SHA256 406ed897aa5c603725fae560a900b370841511c524ba6dd8b6d0249611b13163
- MD5 2edd7c132557a5fb7652a998da02743a
- SHA1 edd0f6c4bf82aa7ec9ff20197a47f22658ebdc71
- SHA512 caee4ca305bdd3c81e36a67ec19e4804f56bacacfabe105f48cd285dbaac74c9b82c79c9c2634506e031a8f90e8a31804bb1a1e90ed6cba2103bd3ab62d6598f
- SSDEEP 393216:I5G+ob5G+oo5G+ob5G+oD5G+ob5G+oo5G+ob5G+oCoO:I47b47o47b47D47b47o47b47CoO
- TLSH T1ACC75A16B6E440E5C1AAC134CF568632E7B17C294FF097EB6255B2C92E33AD07E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry