General
- Target 2026-07-20_91fd210a85f7783cc34e55bf260f1b7b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.1MB
- Sample260720-s5taragy4z
- SHA256 5f773fdd99a3553f649a7569130296a64d962d2aa061c43dc9d03ccb0211d643
- MD5 91fd210a85f7783cc34e55bf260f1b7b
- SHA1 b19731b69dadbce08674d1c5e0b0d4a7755bdbd5
- SHA512 f11f4581b58ce925c5d87d546dd5e35149b6434be17d3e017997ea685caf4c516a6d1566002b86b7879f5b6397366d78b7db34ae971908356286016c0318ea98
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxEu5x6M1pLapIkoq2VjnmxMj:JtcIkGnk3tcIkGnkMj
- TLSH T172B65C2676E440A5C1A9C134CF568732E3B17C298FF197EBA115B2CD2E336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_91fd210a85f7783cc34e55bf260f1b7b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_91fd210a85f7783cc34e55bf260f1b7b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_91fd210a85f7783cc34e55bf260f1b7b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.1MB
- SHA256 5f773fdd99a3553f649a7569130296a64d962d2aa061c43dc9d03ccb0211d643
- MD5 91fd210a85f7783cc34e55bf260f1b7b
- SHA1 b19731b69dadbce08674d1c5e0b0d4a7755bdbd5
- SHA512 f11f4581b58ce925c5d87d546dd5e35149b6434be17d3e017997ea685caf4c516a6d1566002b86b7879f5b6397366d78b7db34ae971908356286016c0318ea98
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxEu5x6M1pLapIkoq2VjnmxMj:JtcIkGnk3tcIkGnkMj
- TLSH T172B65C2676E440A5C1A9C134CF568732E3B17C298FF197EBA115B2CD2E336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry