General
- Target 2026-07-27_7b41b72fdf80d4dc2020a373fd5fd145_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 9.2MB
- Sample260727-hdzcksxta1
- SHA256 067159b7c591c2008f698567ebff1309522f683400aab04d610aaaf6ae6d6a0a
- MD5 7b41b72fdf80d4dc2020a373fd5fd145
- SHA1 2e8b24d8f46d99993da4fd6e746ee4f165420965
- SHA512 f94744b505f660afc8d9a2d29e7574285e289bcd6ab473f3e1207bc810ef108869b3f0241f6632cdff3baba1fc1f2a740348fff085b9b48e033b7024c099b673
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nEe5x6c1QVb6nUm8oe5x6c1QVb6nYC/h1+:l8Vb618L8Vb6H8Vb618L8Vb6YC/h1+
- TLSH T135A69D17F6A440F5D17AD43486A69732EB72B8120B319BCB5394C7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_7b41b72fdf80d4dc2020a373fd5fd145_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_7b41b72fdf80d4dc2020a373fd5fd145_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_7b41b72fdf80d4dc2020a373fd5fd145_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 9.2MB
- SHA256 067159b7c591c2008f698567ebff1309522f683400aab04d610aaaf6ae6d6a0a
- MD5 7b41b72fdf80d4dc2020a373fd5fd145
- SHA1 2e8b24d8f46d99993da4fd6e746ee4f165420965
- SHA512 f94744b505f660afc8d9a2d29e7574285e289bcd6ab473f3e1207bc810ef108869b3f0241f6632cdff3baba1fc1f2a740348fff085b9b48e033b7024c099b673
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nEe5x6c1QVb6nUm8oe5x6c1QVb6nYC/h1+:l8Vb618L8Vb6H8Vb618L8Vb6YC/h1+
- TLSH T135A69D17F6A440F5D17AD43486A69732EB72B8120B319BCB5394C7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry