General
- Target 2026-07-20_a9cab1a263a36f6b04978cae5c0198c1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 32.2MB
- Sample260720-xpmv9act9q
- SHA256 57899e5b8daf18a871a7179cae9e1382620f186556616c5055e2aa65987d8872
- MD5 a9cab1a263a36f6b04978cae5c0198c1
- SHA1 34113d36a478a5dfc91ac88a7db2ed4363f41df8
- SHA512 3a357a00b4eb877bd0ad1eba2f6fe051bc942b74218852e8bda3e3ae10bd4083d3d4f79cba664f38afd164eeeaec48394eb466ba71193b3328495205263419b2
- SSDEEP 196608:Qi8kLri8kLh5cIFGn//h1+5i8kLri8k1i8kLri8kLh5cIFGn//h1+5i8kLri8kF:IkLDkLh6QGEkLDkRkLDkLh6QGEkLDkF
- TLSH T164779E02B6E44069E1AE8534CB668631E7B27C554BB1D7DF5290F69E2E337C0BA35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_a9cab1a263a36f6b04978cae5c0198c1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_a9cab1a263a36f6b04978cae5c0198c1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_a9cab1a263a36f6b04978cae5c0198c1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 32.2MB
- SHA256 57899e5b8daf18a871a7179cae9e1382620f186556616c5055e2aa65987d8872
- MD5 a9cab1a263a36f6b04978cae5c0198c1
- SHA1 34113d36a478a5dfc91ac88a7db2ed4363f41df8
- SHA512 3a357a00b4eb877bd0ad1eba2f6fe051bc942b74218852e8bda3e3ae10bd4083d3d4f79cba664f38afd164eeeaec48394eb466ba71193b3328495205263419b2
- SSDEEP 196608:Qi8kLri8kLh5cIFGn//h1+5i8kLri8k1i8kLri8kLh5cIFGn//h1+5i8kLri8kF:IkLDkLh6QGEkLDkRkLDkLh6QGEkLDkF
- TLSH T164779E02B6E44069E1AE8534CB668631E7B27C554BB1D7DF5290F69E2E337C0BA35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application