General
- Target 2026-07-28_e3ddd716f66ea17cc29be5a1fc56d165_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_remcos_smoke-loader_stop_vidar_wannacry
- Size 4.2MB
- Sample260728-e1jc4ayvdt
- SHA256 17df70db5d02349ba76f2117985d223c82784b6076aceef412dc56778501ae68
- MD5 e3ddd716f66ea17cc29be5a1fc56d165
- SHA1 4ec55d1b16dd397f016c3467e5c30d3c11769134
- SHA512 8e9dd44bfba3411b2d40ba368ed75b3a5686a6024aefa70c73e51b11056577a95acd2f27f024a55be882112c19694cc08e329acfb5a72bade05bbd7535ab5b5e
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQsy6i1zuajsauZjaAqJtb2ITJIUNpYq:TIDQ/nW1Psz4tJ66
- TLSH T122168C12F7B786B5EC739175C6A29255EA7278211B3086CF1384863D2F33BD19E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_e3ddd716f66ea17cc29be5a1fc56d165_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_e3ddd716f66ea17cc29be5a1fc56d165_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_e3ddd716f66ea17cc29be5a1fc56d165_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_remcos_smoke-loader_stop_vidar_wannacry
- Size 4.2MB
- SHA256 17df70db5d02349ba76f2117985d223c82784b6076aceef412dc56778501ae68
- MD5 e3ddd716f66ea17cc29be5a1fc56d165
- SHA1 4ec55d1b16dd397f016c3467e5c30d3c11769134
- SHA512 8e9dd44bfba3411b2d40ba368ed75b3a5686a6024aefa70c73e51b11056577a95acd2f27f024a55be882112c19694cc08e329acfb5a72bade05bbd7535ab5b5e
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQsy6i1zuajsauZjaAqJtb2ITJIUNpYq:TIDQ/nW1Psz4tJ66
- TLSH T122168C12F7B786B5EC739175C6A29255EA7278211B3086CF1384863D2F33BD19E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory