General
- Target 2026-07-27_9021faf35eedfdff4061c8b2d1547e6c_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 28.4MB
- Sample260727-fw253swsdv
- SHA256 1c796a0920d3f1d73c40e90ad78b71fc13ea9d18d319c833945f3e7b07f49d1f
- MD5 9021faf35eedfdff4061c8b2d1547e6c
- SHA1 cc2820f86aca04d43e1313d344eacd5651ef6d6a
- SHA512 49d0e314a4c5eb6cece60ff441b958003bbcc664cc2f7bd8494be50bef5f4f12560ec53a738cc27bbf621741076bf78bc711eabc86fc89ff19e3a1ec79cbbcd3
- SSDEEP 196608:l8Vb618L8Vb6ZUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHJ/h1+:2c7qUEtQevvqc2W1cpV2XI32
- TLSH T1FF675B91BBE843E2E3AA953485B182B6EB717C0E1F31977B0179F21E1F376905D29321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_9021faf35eedfdff4061c8b2d1547e6c_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_9021faf35eedfdff4061c8b2d1547e6c_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_9021faf35eedfdff4061c8b2d1547e6c_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 28.4MB
- SHA256 1c796a0920d3f1d73c40e90ad78b71fc13ea9d18d319c833945f3e7b07f49d1f
- MD5 9021faf35eedfdff4061c8b2d1547e6c
- SHA1 cc2820f86aca04d43e1313d344eacd5651ef6d6a
- SHA512 49d0e314a4c5eb6cece60ff441b958003bbcc664cc2f7bd8494be50bef5f4f12560ec53a738cc27bbf621741076bf78bc711eabc86fc89ff19e3a1ec79cbbcd3
- SSDEEP 196608:l8Vb618L8Vb6ZUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHJ/h1+:2c7qUEtQevvqc2W1cpV2XI32
- TLSH T1FF675B91BBE843E2E3AA953485B182B6EB717C0E1F31977B0179F21E1F376905D29321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application