General
- Target 2026-07-20_89b58fb340bd75b55785310d97e2a31e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 28.5MB
- Sample260720-xw4scaes9t
- SHA256 bfe7e77cf9c12a7f9f445456097ba30d7c39fabf37347606a311df85b486b2f9
- MD5 89b58fb340bd75b55785310d97e2a31e
- SHA1 c062486ac77b9b9bb21cf0672aac6c9ded3a3fcc
- SHA512 fe0332685e23c297f27554706f1d28c21aabab37f73b19fb9e1e8abdbc5a9cb54c63e158830b28054098d07911d6efed1fd2b4e42f3a01abbde23d06b0442e32
- SSDEEP 196608:JtcIkGnkFUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:I5GkFUEtQevvqc2W1cpV2XI32i
- TLSH T161675B91B7E443E2E3AA953489B182B2F7B17C1E5F71937B1139F21E1E336906D29321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_89b58fb340bd75b55785310d97e2a31e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_89b58fb340bd75b55785310d97e2a31e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_89b58fb340bd75b55785310d97e2a31e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 28.5MB
- SHA256 bfe7e77cf9c12a7f9f445456097ba30d7c39fabf37347606a311df85b486b2f9
- MD5 89b58fb340bd75b55785310d97e2a31e
- SHA1 c062486ac77b9b9bb21cf0672aac6c9ded3a3fcc
- SHA512 fe0332685e23c297f27554706f1d28c21aabab37f73b19fb9e1e8abdbc5a9cb54c63e158830b28054098d07911d6efed1fd2b4e42f3a01abbde23d06b0442e32
- SSDEEP 196608:JtcIkGnkFUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:I5GkFUEtQevvqc2W1cpV2XI32i
- TLSH T161675B91B7E443E2E3AA953489B182B2F7B17C1E5F71937B1139F21E1E336906D29321
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry