General
- Target 2026-07-20_1e87d761f652b613eae2547e3fea47b7_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 4.9MB
- Sample260720-mfbrhshs5s
- SHA256 4657fe8cbfee65f288f2d6c267ebf523d8abbc41326471bfaf739ec2080a0c84
- MD5 1e87d761f652b613eae2547e3fea47b7
- SHA1 6bccd4188ace8af7162fc0e9fdaae9b2ae8b5408
- SHA512 6d2720de1add72f3063759902472b7e97aaf3969cc637415a2b835bbf0c5858df3cdacb89581fdb2bdd42dc30ea4bf31bd37c18ace46ab3d89f4835fcd06065a
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nA/h1+:l8Vb618L8Vb6A/h1+
- TLSH T1CB369D17F6A440F5D17AD47486A69736EB3278120B319BCB4394C7292F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_1e87d761f652b613eae2547e3fea47b7_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_1e87d761f652b613eae2547e3fea47b7_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_1e87d761f652b613eae2547e3fea47b7_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 4.9MB
- SHA256 4657fe8cbfee65f288f2d6c267ebf523d8abbc41326471bfaf739ec2080a0c84
- MD5 1e87d761f652b613eae2547e3fea47b7
- SHA1 6bccd4188ace8af7162fc0e9fdaae9b2ae8b5408
- SHA512 6d2720de1add72f3063759902472b7e97aaf3969cc637415a2b835bbf0c5858df3cdacb89581fdb2bdd42dc30ea4bf31bd37c18ace46ab3d89f4835fcd06065a
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nA/h1+:l8Vb618L8Vb6A/h1+
- TLSH T1CB369D17F6A440F5D17AD47486A69736EB3278120B319BCB4394C7292F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry