General
- Target 2026-07-29_55617f5c25936738183d8d2b5a8dd4db_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 29.3MB
- Sample260729-kbydlszapc
- SHA256 b12266867002923b4581080ee5ee5587cdf7db534716e06a2f239936a5dd920c
- MD5 55617f5c25936738183d8d2b5a8dd4db
- SHA1 1d04a396a1cd70f37c40ad158d07d5ca71c6b2be
- SHA512 b0c13b2a0e71e5d6d16932722de12e8d7ecae8865bf89af9da3ad466b852ef0da9889e6e03efe7435711ff113f9328f85905414f23ac278bdfcfac4e6a02de81
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6Vw7wScITw7wScI6dw7wScITw7wScI66/hQ:lYN5YNRYN5YN
- TLSH T13E675B62B1E200B6C6999030CF45933597E27C698BF187E7B245F7D92F325C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_55617f5c25936738183d8d2b5a8dd4db_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_55617f5c25936738183d8d2b5a8dd4db_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_55617f5c25936738183d8d2b5a8dd4db_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 29.3MB
- SHA256 b12266867002923b4581080ee5ee5587cdf7db534716e06a2f239936a5dd920c
- MD5 55617f5c25936738183d8d2b5a8dd4db
- SHA1 1d04a396a1cd70f37c40ad158d07d5ca71c6b2be
- SHA512 b0c13b2a0e71e5d6d16932722de12e8d7ecae8865bf89af9da3ad466b852ef0da9889e6e03efe7435711ff113f9328f85905414f23ac278bdfcfac4e6a02de81
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6Vw7wScITw7wScI6dw7wScITw7wScI66/hQ:lYN5YNRYN5YN
- TLSH T13E675B62B1E200B6C6999030CF45933597E27C698BF187E7B245F7D92F325C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry