General
- Target 2026-07-20_e735cf7d29b15069a81f9a78f932f73f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.1MB
- Sample260720-xe59vadw61
- SHA256 82c0279021137ffe4752f1468f90e6b611e2733294b6c40f301d970b1a3fc8a9
- MD5 e735cf7d29b15069a81f9a78f932f73f
- SHA1 ff126e7090a36679dd24db4206f85e26db4cd234
- SHA512 3d0ab66e85b2857a2ac6c4c878567e18dc8967198f1f46e1f0d8ef11176309f16424a0d4574aee75c219e8f3f52b9a28b2783cf15f7e5910e649448e958ebde3
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbfFiV+XenmE3/zHWJIU3A:Su5x6M1pLapIkoq2VjnmxA
- TLSH T1F4465B16B1A440A5C1A98134CF568632F3B27C298BF193EBA255F2DD1F336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_e735cf7d29b15069a81f9a78f932f73f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_e735cf7d29b15069a81f9a78f932f73f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_e735cf7d29b15069a81f9a78f932f73f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.1MB
- SHA256 82c0279021137ffe4752f1468f90e6b611e2733294b6c40f301d970b1a3fc8a9
- MD5 e735cf7d29b15069a81f9a78f932f73f
- SHA1 ff126e7090a36679dd24db4206f85e26db4cd234
- SHA512 3d0ab66e85b2857a2ac6c4c878567e18dc8967198f1f46e1f0d8ef11176309f16424a0d4574aee75c219e8f3f52b9a28b2783cf15f7e5910e649448e958ebde3
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbfFiV+XenmE3/zHWJIU3A:Su5x6M1pLapIkoq2VjnmxA
- TLSH T1F4465B16B1A440A5C1A98134CF568632F3B27C298BF193EBA255F2DD1F336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry