General
- Target 2026-07-20_b76ba6c3d32cfcfb5b29a7262de93d0e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 30.7MB
- Sample260720-xmp8lact5r
- SHA256 f853dd6de5ff61b41dab14019c8d3dad7e7dd1df1fb93648c464ba5cdf05dbf5
- MD5 b76ba6c3d32cfcfb5b29a7262de93d0e
- SHA1 94db48410fdbabfdb7b7534c46b57fd0e4dffbc4
- SHA512 a5fcab03f267838b6c26a273cc80fabe8a21d5a02ed69a4659902d0c4cb24e749185e76f3f7aae30246af4fe36254560aee28761e9a823c31c1982f6cfa20274
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18UJoKH8Vb618U68Vb618US18UV:2cDcyjcDcydobcDcyjcDcydo
- TLSH T1BE678D17F69440F9D06AD5748A969236EA72BC520B30ABCF4390F7192F33AD05F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_b76ba6c3d32cfcfb5b29a7262de93d0e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_b76ba6c3d32cfcfb5b29a7262de93d0e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_b76ba6c3d32cfcfb5b29a7262de93d0e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 30.7MB
- SHA256 f853dd6de5ff61b41dab14019c8d3dad7e7dd1df1fb93648c464ba5cdf05dbf5
- MD5 b76ba6c3d32cfcfb5b29a7262de93d0e
- SHA1 94db48410fdbabfdb7b7534c46b57fd0e4dffbc4
- SHA512 a5fcab03f267838b6c26a273cc80fabe8a21d5a02ed69a4659902d0c4cb24e749185e76f3f7aae30246af4fe36254560aee28761e9a823c31c1982f6cfa20274
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18UJoKH8Vb618U68Vb618US18UV:2cDcyjcDcydobcDcyjcDcydo
- TLSH T1BE678D17F69440F9D06AD5748A969236EA72BC520B30ABCF4390F7192F33AD05F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry