General
- Target 2026-07-20_58e18af5955d4e93391e82cc9bd00430_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 32.1MB
- Sample260720-x68t2sc16j
- SHA256 ac6aac90b815511e442982739933b1c612c54d7f54b3bdb79d9c4584b351a682
- MD5 58e18af5955d4e93391e82cc9bd00430
- SHA1 7a40f7e565d0a8700e5faf3478989ac373d4ec63
- SHA512 704836c3a969d335d7b46cbb752042549f1f0462acfe108f5b45a1613d15bc64feeb23e34ca05085289c1c752654841fafa76a63d80fdd4a74b49ca20ebd9e67
- SSDEEP 196608:Qi8kLri8kLh5cIFGn//h1+5i8kLri8k1i8kLri8kLh5cIFGn//h1+5i8kLri8k/:IkLDkLh6QGEkLDkRkLDkLh6QGEkLDk/
- TLSH T17E779E0276E44079E1AA8534CB668632E7B27C554BB1D7DF5290F69E2E337C0BA35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_58e18af5955d4e93391e82cc9bd00430_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_58e18af5955d4e93391e82cc9bd00430_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_58e18af5955d4e93391e82cc9bd00430_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 32.1MB
- SHA256 ac6aac90b815511e442982739933b1c612c54d7f54b3bdb79d9c4584b351a682
- MD5 58e18af5955d4e93391e82cc9bd00430
- SHA1 7a40f7e565d0a8700e5faf3478989ac373d4ec63
- SHA512 704836c3a969d335d7b46cbb752042549f1f0462acfe108f5b45a1613d15bc64feeb23e34ca05085289c1c752654841fafa76a63d80fdd4a74b49ca20ebd9e67
- SSDEEP 196608:Qi8kLri8kLh5cIFGn//h1+5i8kLri8k1i8kLri8kLh5cIFGn//h1+5i8kLri8k/:IkLDkLh6QGEkLDkRkLDkLh6QGEkLDk/
- TLSH T17E779E0276E44079E1AA8534CB668632E7B27C554BB1D7DF5290F69E2E337C0BA35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry