General
- Target 2026-07-29_384eb50ba62ff487fec1f3c1646b015e_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 17.8MB
- Sample260729-kfbqeafc45
- SHA256 3d745b549b5d2a395ba4ee6a0a00a2be1d0e9419479cb1d3d66515740c94a7a7
- MD5 384eb50ba62ff487fec1f3c1646b015e
- SHA1 bd0c1ee285ab7a44476ae226b0dcdef42f6add29
- SHA512 71e21b153c78c0bf0e62acbc8b6127690ce67086c1b1cd535f4627fe920c5b2a21ee047439c689c48dfd02c519c5b6a5ba9794136d1af6d7b58e99033c3f0370
- SSDEEP 196608:l8Vb618L8Vb6H8Vb618L8Vb6yJ8Vb618L8Vb6H8Vb618L8Vb6y9/h1+:2c7tc7d6c7tc7d
- TLSH T13C179E17F69440F5D17A953486A69332EB72B8120B319BCF53A4C7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_384eb50ba62ff487fec1f3c1646b015e_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_384eb50ba62ff487fec1f3c1646b015e_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_384eb50ba62ff487fec1f3c1646b015e_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 17.8MB
- SHA256 3d745b549b5d2a395ba4ee6a0a00a2be1d0e9419479cb1d3d66515740c94a7a7
- MD5 384eb50ba62ff487fec1f3c1646b015e
- SHA1 bd0c1ee285ab7a44476ae226b0dcdef42f6add29
- SHA512 71e21b153c78c0bf0e62acbc8b6127690ce67086c1b1cd535f4627fe920c5b2a21ee047439c689c48dfd02c519c5b6a5ba9794136d1af6d7b58e99033c3f0370
- SSDEEP 196608:l8Vb618L8Vb6H8Vb618L8Vb6yJ8Vb618L8Vb6H8Vb618L8Vb6y9/h1+:2c7tc7d6c7tc7d
- TLSH T13C179E17F69440F5D17A953486A69332EB72B8120B319BCF53A4C7192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry