General
- Target 2026-07-28_cdca05e33c2b3e68abb4ceee55f31cab_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 18.5MB
- Sample260728-ypyhesvblb
- SHA256 3fb5752075c5f35caf17f8a79f02c89ab24b7c2a26210a9f6691528fc988df49
- MD5 cdca05e33c2b3e68abb4ceee55f31cab
- SHA1 498ce81c438500fbc35adbe818a00828f989983a
- SHA512 59184cb31650e87555574dd2b799100b35ddccc15df02cb9fcf10c3ecb7a88cb55b3106e596a2f5a10e05c60766dea029a0e64b85a340112b6a3690ddb774892
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+4w/h1+Qw/h1+8w/h1+Qw/h1+JWqQI0pyN/h1+:6WqQjp
- TLSH T17A177C52F6A481B1D0B6C474C5E6A776EA327C425B308BCB5345E7282E376D09F3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_cdca05e33c2b3e68abb4ceee55f31cab_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_cdca05e33c2b3e68abb4ceee55f31cab_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_cdca05e33c2b3e68abb4ceee55f31cab_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 18.5MB
- SHA256 3fb5752075c5f35caf17f8a79f02c89ab24b7c2a26210a9f6691528fc988df49
- MD5 cdca05e33c2b3e68abb4ceee55f31cab
- SHA1 498ce81c438500fbc35adbe818a00828f989983a
- SHA512 59184cb31650e87555574dd2b799100b35ddccc15df02cb9fcf10c3ecb7a88cb55b3106e596a2f5a10e05c60766dea029a0e64b85a340112b6a3690ddb774892
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+4w/h1+Qw/h1+8w/h1+Qw/h1+JWqQI0pyN/h1+:6WqQjp
- TLSH T17A177C52F6A481B1D0B6C474C5E6A776EA327C425B308BCB5345E7282E376D09F3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application