General
- Target 2026-07-20_db64772d594401147870a6e64930a86c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 11.3MB
- Sample260720-vd3q8agx3m
- SHA256 07d1ce999d0913ec52eabbb8c3535bac2389ccf95de8185e7e9e6d145aaf1955
- MD5 db64772d594401147870a6e64930a86c
- SHA1 241796c79e192db5847d491d488fadd88e4b497e
- SHA512 9fd81c71ec720df44e3f156123c37189cb2a998def435f24c7625ec71758a1c567d3208d5c1f71fd9389776550581467009741935a5d57cb82933902ea100f69
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxEu5x6M1pLapIkoq2VjnmxbLxDy:JtcIkGnk3tcIkGnkbly
- TLSH T151C66C1672E440E5C1A9C134CF568632E3B17C298FF197EBA255B2CD2E336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_db64772d594401147870a6e64930a86c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_db64772d594401147870a6e64930a86c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_db64772d594401147870a6e64930a86c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 11.3MB
- SHA256 07d1ce999d0913ec52eabbb8c3535bac2389ccf95de8185e7e9e6d145aaf1955
- MD5 db64772d594401147870a6e64930a86c
- SHA1 241796c79e192db5847d491d488fadd88e4b497e
- SHA512 9fd81c71ec720df44e3f156123c37189cb2a998def435f24c7625ec71758a1c567d3208d5c1f71fd9389776550581467009741935a5d57cb82933902ea100f69
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxEu5x6M1pLapIkoq2VjnmxbLxDy:JtcIkGnk3tcIkGnkbly
- TLSH T151C66C1672E440E5C1A9C134CF568632E3B17C298FF197EBA255B2CD2E336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry