General
- Target 2026-07-27_fb99e7359f33f77a28baac2e6b27573c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 28.6MB
- Sample260727-vjabvsxdle
- SHA256 227e8732c384bb1fe67115ff04abd03a1bd8dc812d17e4c4e77be47d3279d017
- MD5 fb99e7359f33f77a28baac2e6b27573c
- SHA1 3093e37d3fab5d5d6205355c290f9480a8045c15
- SHA512 ef094a12abc82a50b372c4a82bdeca33ee7ac9b3fcd2d59d1884dadb744a905454861b74b6b191b6c7d3b2bde54e3c7b27ecc6a351f650d1e6052880ed96be87
- SSDEEP 196608:JtcIkGnkWUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:I5GkWUEtQevvqc2W1cpV2XI32i
- TLSH T127675A91B6E443E2E3AA9534C9B182B2F7B17C1E5F71937B1139F21E1F336906D29221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_fb99e7359f33f77a28baac2e6b27573c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_fb99e7359f33f77a28baac2e6b27573c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_fb99e7359f33f77a28baac2e6b27573c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 28.6MB
- SHA256 227e8732c384bb1fe67115ff04abd03a1bd8dc812d17e4c4e77be47d3279d017
- MD5 fb99e7359f33f77a28baac2e6b27573c
- SHA1 3093e37d3fab5d5d6205355c290f9480a8045c15
- SHA512 ef094a12abc82a50b372c4a82bdeca33ee7ac9b3fcd2d59d1884dadb744a905454861b74b6b191b6c7d3b2bde54e3c7b27ecc6a351f650d1e6052880ed96be87
- SSDEEP 196608:JtcIkGnkWUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:I5GkWUEtQevvqc2W1cpV2XI32i
- TLSH T127675A91B6E443E2E3AA9534C9B182B2F7B17C1E5F71937B1139F21E1F336906D29221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application