General
- Target 2026-07-19_cae0b3fcfdeb3effc7db972b3e6f5511_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 14.5MB
- Sample260720-axj31aas2r
- SHA256 710c1efc5dc29e88c08dfe52ba835783ca8927ba37ce081cd8ae1870b6c76058
- MD5 cae0b3fcfdeb3effc7db972b3e6f5511
- SHA1 1ea83dfe46cf7675dd1e47a66cab4428e8ba5c82
- SHA512 18c488544a4c75489b986906cf560fd04d9d2c7550dbfc04eda50545d4a76a2a0bcd077127d8d1297421b6b3324b0a0167944aca30a44dfb6c4c7006270c9f36
- SSDEEP 196608:l8Vb618U68Vb618US1Gh8Vb618U68Vb618US1GWoKA/h1+:2cDcyhcDcyHo
- TLSH T140E69D17F69440F9D06AD57486969232EA72BC520B31ABCF4394F7192F33AD06F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_cae0b3fcfdeb3effc7db972b3e6f5511_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_cae0b3fcfdeb3effc7db972b3e6f5511_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_cae0b3fcfdeb3effc7db972b3e6f5511_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 14.5MB
- SHA256 710c1efc5dc29e88c08dfe52ba835783ca8927ba37ce081cd8ae1870b6c76058
- MD5 cae0b3fcfdeb3effc7db972b3e6f5511
- SHA1 1ea83dfe46cf7675dd1e47a66cab4428e8ba5c82
- SHA512 18c488544a4c75489b986906cf560fd04d9d2c7550dbfc04eda50545d4a76a2a0bcd077127d8d1297421b6b3324b0a0167944aca30a44dfb6c4c7006270c9f36
- SSDEEP 196608:l8Vb618U68Vb618US1Gh8Vb618U68Vb618US1GWoKA/h1+:2cDcyhcDcyHo
- TLSH T140E69D17F69440F9D06AD57486969232EA72BC520B31ABCF4394F7192F33AD06F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry