General
- Target 2026-07-27_049cdcb4fe5772892ecee2f85122a1e3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 12.4MB
- Sample260727-sd8w5awsby
- SHA256 255f933f2e5c32172ab6a49f72a4f8ae18207d3adf0db5ac1177c3d68c94c4b0
- MD5 049cdcb4fe5772892ecee2f85122a1e3
- SHA1 3f0d2b40590d69411076d9bf0fb691c2f3baf3cf
- SHA512 e04ed45b3c015b94e917bb6c40f191206d7ac8680276d091bf874cf2eb5dfc9cbc7411416c079cfa3a80f1f0beaaeda3edcc7c11aedf1d1c403c7ac30ec3f9a1
- SSDEEP 98304:Su5x6M1pLapIkoq2Vjnm1gPALxu5x6M1pLapIkoq2Vjnm1gPALk:JtcIkGnDALWtcIkGnDALk
- TLSH T1C9D67C2676E440E5C1AAC534CF528632E3B17C258FF097EBA255B2CD2E336D07E3A615
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_049cdcb4fe5772892ecee2f85122a1e3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_049cdcb4fe5772892ecee2f85122a1e3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_049cdcb4fe5772892ecee2f85122a1e3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 12.4MB
- SHA256 255f933f2e5c32172ab6a49f72a4f8ae18207d3adf0db5ac1177c3d68c94c4b0
- MD5 049cdcb4fe5772892ecee2f85122a1e3
- SHA1 3f0d2b40590d69411076d9bf0fb691c2f3baf3cf
- SHA512 e04ed45b3c015b94e917bb6c40f191206d7ac8680276d091bf874cf2eb5dfc9cbc7411416c079cfa3a80f1f0beaaeda3edcc7c11aedf1d1c403c7ac30ec3f9a1
- SSDEEP 98304:Su5x6M1pLapIkoq2Vjnm1gPALxu5x6M1pLapIkoq2Vjnm1gPALk:JtcIkGnDALWtcIkGnDALk
- TLSH T1C9D67C2676E440E5C1AAC534CF528632E3B17C258FF097EBA255B2CD2E336D07E3A615
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry