General
- Target 2026-07-20_9d31832b30ab05a525e749b7c4578ac4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 55.5MB
- Sample260720-xryqjad16t
- SHA256 b8b789f31e0df25c8a88cb1e9d4afc37d17ab924c0e4a7817eee90db5a39a9ad
- MD5 9d31832b30ab05a525e749b7c4578ac4
- SHA1 6176806a182577aa4c80986d121efdacb70c3e0c
- SHA512 174dc9211e4bbe37e6be4b5640119a46d6f343aa700a30db479351764f52de53d3c9c32c105e4a1139ed94fddd37637671d26aaee72c29fc3f744e07396951c7
- SSDEEP 786432:IkLDkLA/EkLDkRkLDkLA/EkLDkhE8c23pV2X+T:v/V/6Eh2ZV2XG
- TLSH T10ED76B42B6E443E6E3AA85348A728672E7B17C0E1B7197BF5174F25E1E336C06D35322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_9d31832b30ab05a525e749b7c4578ac4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_9d31832b30ab05a525e749b7c4578ac4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_9d31832b30ab05a525e749b7c4578ac4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 55.5MB
- SHA256 b8b789f31e0df25c8a88cb1e9d4afc37d17ab924c0e4a7817eee90db5a39a9ad
- MD5 9d31832b30ab05a525e749b7c4578ac4
- SHA1 6176806a182577aa4c80986d121efdacb70c3e0c
- SHA512 174dc9211e4bbe37e6be4b5640119a46d6f343aa700a30db479351764f52de53d3c9c32c105e4a1139ed94fddd37637671d26aaee72c29fc3f744e07396951c7
- SSDEEP 786432:IkLDkLA/EkLDkRkLDkLA/EkLDkhE8c23pV2X+T:v/V/6Eh2ZV2XG
- TLSH T10ED76B42B6E443E6E3AA85348A728672E7B17C0E1B7197BF5174F25E1E336C06D35322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry