General
- Target 2026-07-20_e9ea28cd9b3a3b27d225433f2f29f8dd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 38.9MB
- Sample260720-kdg5ead19t
- SHA256 ad37e4e6222bb2f63426fbbad6e21b85212df07f7606f5fac086a075663f9d93
- MD5 e9ea28cd9b3a3b27d225433f2f29f8dd
- SHA1 45c5a95907b1df2eec1fcdbc48b14b1e9af69550
- SHA512 7ff39e915fd31aa465947796694821c4b1729c342d9405a963936a321222d22a2e3565930b1538a25af3d700b3b2c91ef289457c3c807ecf7a2de4f029fe45a2
- SSDEEP 196608:l8Vb618U68Vb618US18UHcI/8Vb618U68Vb618US18UHcIu2VhF8Vb618U68Vb6f:2cDcyAdcDcyALeccDcyAdcDcyALeA
- TLSH T146976B13B2A540E9D06AD030CB568231E7B27C654BF197DB5290B6D92F33AD07F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_e9ea28cd9b3a3b27d225433f2f29f8dd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_e9ea28cd9b3a3b27d225433f2f29f8dd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_e9ea28cd9b3a3b27d225433f2f29f8dd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 38.9MB
- SHA256 ad37e4e6222bb2f63426fbbad6e21b85212df07f7606f5fac086a075663f9d93
- MD5 e9ea28cd9b3a3b27d225433f2f29f8dd
- SHA1 45c5a95907b1df2eec1fcdbc48b14b1e9af69550
- SHA512 7ff39e915fd31aa465947796694821c4b1729c342d9405a963936a321222d22a2e3565930b1538a25af3d700b3b2c91ef289457c3c807ecf7a2de4f029fe45a2
- SSDEEP 196608:l8Vb618U68Vb618US18UHcI/8Vb618U68Vb618US18UHcIu2VhF8Vb618U68Vb6f:2cDcyAdcDcyALeccDcyAdcDcyALeA
- TLSH T146976B13B2A540E9D06AD030CB568231E7B27C654BF197DB5290B6D92F33AD07F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry