General
- Target 2026-07-29_cc3d4233419d71d29c9e5dac6adc249f_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 17.9MB
- Sample260729-ftj7gsgr5t
- SHA256 1c338a3347c984a47a72eb4fbf9922f7c6a66477acd16da7f7850883092c9479
- MD5 cc3d4233419d71d29c9e5dac6adc249f
- SHA1 51c227f5301e4d19ee7e71b361d701a8e3747aad
- SHA512 d81b0951263e463d0b86d61eeef884e0e9dc6d053ec5911f8febffa177492a5bec23058b789a4bf2d6c7ad82ce49d1b2d9831dcc948e05371012f0615f41257d
- SSDEEP 196608:l8Vb618L8Vb6H8Vb618L8Vb6yJ8Vb618L8Vb6H8Vb618L8Vb6y+C/h1+:2c7tc7d6c7tc7d+
- TLSH T177179E17F69440F5D17A953486A69332EB72B8120B319BCF53A4C7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_cc3d4233419d71d29c9e5dac6adc249f_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_cc3d4233419d71d29c9e5dac6adc249f_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_cc3d4233419d71d29c9e5dac6adc249f_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 17.9MB
- SHA256 1c338a3347c984a47a72eb4fbf9922f7c6a66477acd16da7f7850883092c9479
- MD5 cc3d4233419d71d29c9e5dac6adc249f
- SHA1 51c227f5301e4d19ee7e71b361d701a8e3747aad
- SHA512 d81b0951263e463d0b86d61eeef884e0e9dc6d053ec5911f8febffa177492a5bec23058b789a4bf2d6c7ad82ce49d1b2d9831dcc948e05371012f0615f41257d
- SSDEEP 196608:l8Vb618L8Vb6H8Vb618L8Vb6yJ8Vb618L8Vb6H8Vb618L8Vb6y+C/h1+:2c7tc7d6c7tc7d+
- TLSH T177179E17F69440F5D17A953486A69332EB72B8120B319BCF53A4C7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry