General
- Target 2026-07-18_6e2f07fe210893ba2b03cac23699ee4b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 13.6MB
- Sample260718-s8k4jsh19x
- SHA256 9ea276f6826daab20e916382949a039947548ff5bacadd194bcdbd51ebb83fdf
- MD5 6e2f07fe210893ba2b03cac23699ee4b
- SHA1 fc8fd8137f7bf6729698dfa2eb504f9405a27906
- SHA512 138e9b1fb197ac4e02823e26b7024da348e80330c728bbea56dba3a616362d57b3941ad37a3af26636e9be2fd60a0fb17382d0aa5edbab6e853db59b6f818e43
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmHu5x6M1pLapIkoq2VjnmX+WQtZ/K0tGOFWVRuLftCT:JtcIkGnNtcIkGnO+WyZ/K0ttYVAAT
- TLSH T178E66C13B2E440A9D1A9C134CF668732E7B17C198BF197EF625172C92E33AD07A39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_6e2f07fe210893ba2b03cac23699ee4b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_6e2f07fe210893ba2b03cac23699ee4b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_6e2f07fe210893ba2b03cac23699ee4b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 13.6MB
- SHA256 9ea276f6826daab20e916382949a039947548ff5bacadd194bcdbd51ebb83fdf
- MD5 6e2f07fe210893ba2b03cac23699ee4b
- SHA1 fc8fd8137f7bf6729698dfa2eb504f9405a27906
- SHA512 138e9b1fb197ac4e02823e26b7024da348e80330c728bbea56dba3a616362d57b3941ad37a3af26636e9be2fd60a0fb17382d0aa5edbab6e853db59b6f818e43
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmHu5x6M1pLapIkoq2VjnmX+WQtZ/K0tGOFWVRuLftCT:JtcIkGnNtcIkGnO+WyZ/K0ttYVAAT
- TLSH T178E66C13B2E440A9D1A9C134CF668732E7B17C198BF197EF625172C92E33AD07A39716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry