General
- Target 2026-07-20_57b68ca848c4525c25551b0eea32fba7_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.1MB
- Sample260720-2tw2yaat4x
- SHA256 175ba79c1ceb9fa159d25e215f568f7deb27cec3492b110aca5efc4763d54826
- MD5 57b68ca848c4525c25551b0eea32fba7
- SHA1 2de2460829cd70410216c36796eeb52218b81782
- SHA512 0217951492bd5e9ccbcefee659073f1e4b0f3e8214584f671a413e1f049a6e99ebee92e55643dfaf891b72c9b6bba9b4ca8a63af0863636f8dd911ee43a616bd
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglnhOwY5fqatgljmpYqQY5GWKYcL2y6i1zuaja:TID41qM5ram6m51KYcL2tBW1Pszx7
- TLSH T1CC367D16B7E445A1D5778135C56682A2EE727C211F30D7CF1390AA3D6F337D0AA3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_57b68ca848c4525c25551b0eea32fba7_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_57b68ca848c4525c25551b0eea32fba7_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_57b68ca848c4525c25551b0eea32fba7_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.1MB
- SHA256 175ba79c1ceb9fa159d25e215f568f7deb27cec3492b110aca5efc4763d54826
- MD5 57b68ca848c4525c25551b0eea32fba7
- SHA1 2de2460829cd70410216c36796eeb52218b81782
- SHA512 0217951492bd5e9ccbcefee659073f1e4b0f3e8214584f671a413e1f049a6e99ebee92e55643dfaf891b72c9b6bba9b4ca8a63af0863636f8dd911ee43a616bd
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglnhOwY5fqatgljmpYqQY5GWKYcL2y6i1zuaja:TID41qM5ram6m51KYcL2tBW1Pszx7
- TLSH T1CC367D16B7E445A1D5778135C56682A2EE727C211F30D7CF1390AA3D6F337D0AA3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory