General
- Target 2026-07-27_a5e59f7fc837b5e66a8ae5f9196ef6b3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 21.5MB
- Sample260727-g5vb9sxape
- SHA256 d269605080d7115539a2f17328624d4a963972c9f3366f3cfd6a24781168a103
- MD5 a5e59f7fc837b5e66a8ae5f9196ef6b3
- SHA1 b5194e51a2b5f094f529af82b51a268adbe246b6
- SHA512 91c6d518de5454649dd4406dd890e3621d0190ecb0f2a7ca9963b8a7ccd89b993f5221475939746fe4ac2f6281d330e205b36e860a403a7425d3bc1dc83baaf9
- SSDEEP 196608:l8Vb618U68Vb618US18UHcI/8Vb618U68Vb618US18UHcIAWqQI0pyi/h1+:2cDcyAdcDcyAJWqQjp
- TLSH T12C377B13B2E540E9D06AD174CB668331EBB27C564BB096DF1250B2992F33AD07F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_a5e59f7fc837b5e66a8ae5f9196ef6b3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_a5e59f7fc837b5e66a8ae5f9196ef6b3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_a5e59f7fc837b5e66a8ae5f9196ef6b3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 21.5MB
- SHA256 d269605080d7115539a2f17328624d4a963972c9f3366f3cfd6a24781168a103
- MD5 a5e59f7fc837b5e66a8ae5f9196ef6b3
- SHA1 b5194e51a2b5f094f529af82b51a268adbe246b6
- SHA512 91c6d518de5454649dd4406dd890e3621d0190ecb0f2a7ca9963b8a7ccd89b993f5221475939746fe4ac2f6281d330e205b36e860a403a7425d3bc1dc83baaf9
- SSDEEP 196608:l8Vb618U68Vb618US18UHcI/8Vb618U68Vb618US18UHcIAWqQI0pyi/h1+:2cDcyAdcDcyAJWqQjp
- TLSH T12C377B13B2E540E9D06AD174CB668331EBB27C564BB096DF1250B2992F33AD07F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application