General
- Target 2026-07-29_671131f18ba7b08e2810cf4cd95a8b05_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 17.9MB
- Sample260729-hq68ysbj41
- SHA256 88881ed1a62e5b79bb659293d7d1f647a37d3ce5df18d5d7c0ceb39f95949c61
- MD5 671131f18ba7b08e2810cf4cd95a8b05
- SHA1 b019b67fdf4c17524a1195ab0a172eb04dae505e
- SHA512 bbab339c8c1f3f24aa10f6e19a72b57bdc9bc1a35c7461418205da63fc6d9ec725c072bf9fc2d33307efc136ff6d9289083e1193c82afeb5032b65257f3149ae
- SSDEEP 196608:l8Vb618L8Vb6H8Vb618L8Vb6yJ8Vb618L8Vb6H8Vb618L8Vb6yl/h1+:2c7tc7d6c7tc7d
- TLSH T16D179E17F69440F5D17A953486A69332EB73B8120B319BCF53A4C6291F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_671131f18ba7b08e2810cf4cd95a8b05_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_671131f18ba7b08e2810cf4cd95a8b05_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_671131f18ba7b08e2810cf4cd95a8b05_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 17.9MB
- SHA256 88881ed1a62e5b79bb659293d7d1f647a37d3ce5df18d5d7c0ceb39f95949c61
- MD5 671131f18ba7b08e2810cf4cd95a8b05
- SHA1 b019b67fdf4c17524a1195ab0a172eb04dae505e
- SHA512 bbab339c8c1f3f24aa10f6e19a72b57bdc9bc1a35c7461418205da63fc6d9ec725c072bf9fc2d33307efc136ff6d9289083e1193c82afeb5032b65257f3149ae
- SSDEEP 196608:l8Vb618L8Vb6H8Vb618L8Vb6yJ8Vb618L8Vb6H8Vb618L8Vb6yl/h1+:2c7tc7d6c7tc7d
- TLSH T16D179E17F69440F5D17A953486A69332EB73B8120B319BCF53A4C6291F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry