General
- Target 2026-07-23_183ba70efa43fc7e0c464daf2576c10b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_remcos_smoke-loader_stop_vidar
- Size 3.9MB
- Sample260723-pfppgsybkc
- SHA256 97fd38db3323e35abcd58ac752468fb746789dbaa3786604bb81d238c64df2dd
- MD5 183ba70efa43fc7e0c464daf2576c10b
- SHA1 ca9afc5dc325dca756c8f4399fc8cc49677f8e02
- SHA512 4675f79b0c0332fcdfbfa0f980792af2af363ed4b999cc6f6ab63afaa44030ff38697e2c14c49233e3438cdb68cbd74491e00e17b245219cf430cc5e825c2e03
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQsy6i1zuajsauZjaAqJtb2ITJIUd56rX:TIDQ/nW1Psz4tJBrX
- TLSH T13C167B12A7AB4AB5ED77913485A65225EA737C211F3087CF13409A3D2F33AD19E39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_183ba70efa43fc7e0c464daf2576c10b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_183ba70efa43fc7e0c464daf2576c10b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_183ba70efa43fc7e0c464daf2576c10b_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_remcos_smoke-loader_stop_vidar
- Size 3.9MB
- SHA256 97fd38db3323e35abcd58ac752468fb746789dbaa3786604bb81d238c64df2dd
- MD5 183ba70efa43fc7e0c464daf2576c10b
- SHA1 ca9afc5dc325dca756c8f4399fc8cc49677f8e02
- SHA512 4675f79b0c0332fcdfbfa0f980792af2af363ed4b999cc6f6ab63afaa44030ff38697e2c14c49233e3438cdb68cbd74491e00e17b245219cf430cc5e825c2e03
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQsy6i1zuajsauZjaAqJtb2ITJIUd56rX:TIDQ/nW1Psz4tJBrX
- TLSH T13C167B12A7AB4AB5ED77913485A65225EA737C211F3087CF13409A3D2F33AD19E39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory