General
- Target 2026-07-20_7425dfafe13c8d24d897c38293729e46_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry
- Size 8.5MB
- Sample260720-llmkjafz7t
- SHA256 d56e500affbf94bf1a770342474d31df8b60c1a5e1eb6a10c84f07ebb6e76c70
- MD5 7425dfafe13c8d24d897c38293729e46
- SHA1 7514988c7eba49fd8438be3a81f4d669f1f95574
- SHA512 4bfb9268ff4e1a9bdc63d30d01f4ee5a6d51854ea4d43d3af4b7776c47a37336e864f2571bff71f556523c59bd477ea76075151f51fe64699a8189492ac3c487
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nEe5x6c1QVb6nUm8oe5x6c1QVb6n:l8Vb618L8Vb6H8Vb618L8Vb6
- TLSH T116969E17F69540F5D17A993046AA9332EB72B8120B319BCF93A4C7191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_7425dfafe13c8d24d897c38293729e46_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_7425dfafe13c8d24d897c38293729e46_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_7425dfafe13c8d24d897c38293729e46_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry
- Size 8.5MB
- SHA256 d56e500affbf94bf1a770342474d31df8b60c1a5e1eb6a10c84f07ebb6e76c70
- MD5 7425dfafe13c8d24d897c38293729e46
- SHA1 7514988c7eba49fd8438be3a81f4d669f1f95574
- SHA512 4bfb9268ff4e1a9bdc63d30d01f4ee5a6d51854ea4d43d3af4b7776c47a37336e864f2571bff71f556523c59bd477ea76075151f51fe64699a8189492ac3c487
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nEe5x6c1QVb6nUm8oe5x6c1QVb6n:l8Vb618L8Vb6H8Vb618L8Vb6
- TLSH T116969E17F69540F5D17A993046AA9332EB72B8120B319BCF93A4C7191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry