General
- Target 2026-07-20_335b176c1b9e96da43455cde209f8da7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 23.0MB
- Sample260720-l68cqsgy51
- SHA256 5d6cc168def2d462906ec3b857bba85eabebb237d2f4087c36c0e2a0dd86a884
- MD5 335b176c1b9e96da43455cde209f8da7
- SHA1 1d3fc1443d75a8f33d355e84ec61484808ef8f73
- SHA512 4872ed87b648b87d510cb90a4ea890948d7913b17a09b407c1317d1815c22ae4822da98551c3628f10c2a24ddd1e5f254c8dbba5229edbc04bf02289420f6d11
- SSDEEP 196608:l8Vb618U68Vb618US18UHcI/8Vb618U68Vb618US18UHcIAWqQI0pyeGn:2cDcyAdcDcyAJWqQjpbG
- TLSH T16C377C13B6E540E8D0AAD174CB568332EBB27C554BB096DF1250B2992F33AD07F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_335b176c1b9e96da43455cde209f8da7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_335b176c1b9e96da43455cde209f8da7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_335b176c1b9e96da43455cde209f8da7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 23.0MB
- SHA256 5d6cc168def2d462906ec3b857bba85eabebb237d2f4087c36c0e2a0dd86a884
- MD5 335b176c1b9e96da43455cde209f8da7
- SHA1 1d3fc1443d75a8f33d355e84ec61484808ef8f73
- SHA512 4872ed87b648b87d510cb90a4ea890948d7913b17a09b407c1317d1815c22ae4822da98551c3628f10c2a24ddd1e5f254c8dbba5229edbc04bf02289420f6d11
- SSDEEP 196608:l8Vb618U68Vb618US18UHcI/8Vb618U68Vb618US18UHcIAWqQI0pyeGn:2cDcyAdcDcyAJWqQjpbG
- TLSH T16C377C13B6E540E8D0AAD174CB568332EBB27C554BB096DF1250B2992F33AD07F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry