General
- Target 2026-07-20_81f2b9d3b984bf80e994348b3eac97ee_amadey_cobalt-strike_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 9.2MB
- Sample260720-lf3pkafy2s
- SHA256 d32484778764349c76352ef4ce9296ab9c13da5eb8b9f8a0cefe99ef04486fcf
- MD5 81f2b9d3b984bf80e994348b3eac97ee
- SHA1 8c410cfb717e6f8d0cce18f63585dea4cab7195f
- SHA512 0752a1ba5a1833ce0bf787ebe0d59c7810b131bf4846bd3495097c32504510bd9b8a0c68e460c625fa0d4ec196a246c4121e55d4998447f5da72714c4923ddda
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb6nUm8U9hx0zQLapIz/h1+:l8Vb618U68Vb618UbKzQcIz/h1+
- TLSH T1FBA65A22B2E140A5D06A9031CF568731E7E27C654FF097DB9254B2992F336D07F3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_81f2b9d3b984bf80e994348b3eac97ee_amadey_cobalt-strike_elex_emotet_glassworm_hawkeye_hijac.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_81f2b9d3b984bf80e994348b3eac97ee_amadey_cobalt-strike_elex_emotet_glassworm_hawkeye_hijac.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_81f2b9d3b984bf80e994348b3eac97ee_amadey_cobalt-strike_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 9.2MB
- SHA256 d32484778764349c76352ef4ce9296ab9c13da5eb8b9f8a0cefe99ef04486fcf
- MD5 81f2b9d3b984bf80e994348b3eac97ee
- SHA1 8c410cfb717e6f8d0cce18f63585dea4cab7195f
- SHA512 0752a1ba5a1833ce0bf787ebe0d59c7810b131bf4846bd3495097c32504510bd9b8a0c68e460c625fa0d4ec196a246c4121e55d4998447f5da72714c4923ddda
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb6nUm8U9hx0zQLapIz/h1+:l8Vb618U68Vb618UbKzQcIz/h1+
- TLSH T1FBA65A22B2E140A5D06A9031CF568731E7E27C654FF097DB9254B2992F336D07F3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry