General
- Target 2026-07-28_c69397cb21573945581ce1a43b73748a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 17.2MB
- Sample260728-yrajdavbph
- SHA256 657565e89d9e174084819d9aad1658b2c6d7effd770e019490569c4a97b62d71
- MD5 c69397cb21573945581ce1a43b73748a
- SHA1 15d8d1ab036f4ebf0790220668e222501c9f6d95
- SHA512 369cc03c001588b454498c06cdf3fa2bdfef5e5ff8d2745b1cb970f2c9c499e0a4eabe6b8e3873e017b5d4e9fd376364af6553dd7ef9d19bc6fdfa6b5d411749
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzkw5G72VhQb:2cD2cDIEU8IBJkwmeQ
- TLSH T1F0079E17F6A440F9D06AC57486969232EB72BC110B319BCF53A4F6692F33AD05F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_c69397cb21573945581ce1a43b73748a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_c69397cb21573945581ce1a43b73748a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_c69397cb21573945581ce1a43b73748a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 17.2MB
- SHA256 657565e89d9e174084819d9aad1658b2c6d7effd770e019490569c4a97b62d71
- MD5 c69397cb21573945581ce1a43b73748a
- SHA1 15d8d1ab036f4ebf0790220668e222501c9f6d95
- SHA512 369cc03c001588b454498c06cdf3fa2bdfef5e5ff8d2745b1cb970f2c9c499e0a4eabe6b8e3873e017b5d4e9fd376364af6553dd7ef9d19bc6fdfa6b5d411749
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzkw5G72VhQb:2cD2cDIEU8IBJkwmeQ
- TLSH T1F0079E17F6A440F9D06AC57486969232EB72BC110B319BCF53A4F6692F33AD05F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry