General
- Target 2026-07-20_e878155c03a55d7aa6b89ee1a18fe978_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 57.0MB
- Sample260720-kd6g1aes3w
- SHA256 18e5ce58daf16fb80ea3a3a7724df041ba579338b313bda25ea50f28728fbfb2
- MD5 e878155c03a55d7aa6b89ee1a18fe978
- SHA1 2d03692e9ac295bc5647af432e7617a918365d02
- SHA512 c3bc6eaf8c274bc9889dc9acabeeebfd76bdbf6dd329b3b1204301801a7d9080c74bd5643ac9ce1af6b093c88327d9356b19fce9c7850a9d9d712b906174b841
- SSDEEP 786432:tAyAWAyA8fjp9AyAWAyA8fjp0E8c23pV2XJ:tAyAWAyA8fj3AyAWAyA8fjuEh2ZV2XJ
- TLSH T100D77B13B6E500E9E06AD574CB668232EBB27C510BB197DF1250F29A1F33AD07E39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_e878155c03a55d7aa6b89ee1a18fe978_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_e878155c03a55d7aa6b89ee1a18fe978_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_e878155c03a55d7aa6b89ee1a18fe978_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 57.0MB
- SHA256 18e5ce58daf16fb80ea3a3a7724df041ba579338b313bda25ea50f28728fbfb2
- MD5 e878155c03a55d7aa6b89ee1a18fe978
- SHA1 2d03692e9ac295bc5647af432e7617a918365d02
- SHA512 c3bc6eaf8c274bc9889dc9acabeeebfd76bdbf6dd329b3b1204301801a7d9080c74bd5643ac9ce1af6b093c88327d9356b19fce9c7850a9d9d712b906174b841
- SSDEEP 786432:tAyAWAyA8fjp9AyAWAyA8fjp0E8c23pV2XJ:tAyAWAyA8fj3AyAWAyA8fjuEh2ZV2XJ
- TLSH T100D77B13B6E500E9E06AD574CB668232EBB27C510BB197DF1250F29A1F33AD07E39725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry