General
- Target 2026-07-29_0c35c78072607b52c10596f3da6d31a0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 14.3MB
- Sample260729-kkh1aassaz
- SHA256 d5da039decc4339c552001de13981d433ec8f10fbff7f3eba52c89b96a3c357c
- MD5 0c35c78072607b52c10596f3da6d31a0
- SHA1 f27b16ffd1bbf2915c7cf4a193b7ce2d8a992da6
- SHA512 8cdbf677ecdea0e8229a5086b2e9eb133f40e33b59ac3bed3c54552be0f96550a8010dfb9368236a9f3a0cfe1ddcacce1659f448f0af59b3c56dd8839994ea56
- SSDEEP 98304:Uu5x6M1Ku5x6M1wu5x6M1uu5x6M1Ku5x6M1wu5x6M1xu5x6M1Ku5x6M1wu5x6M1d:ndPxdPidPxdPtKz9/h1+
- TLSH T15FE67C26F99184F2C66958308B5AA731EB72BD114B61C7C7C394F62D6F331C0AD3662B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_0c35c78072607b52c10596f3da6d31a0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_0c35c78072607b52c10596f3da6d31a0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_0c35c78072607b52c10596f3da6d31a0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 14.3MB
- SHA256 d5da039decc4339c552001de13981d433ec8f10fbff7f3eba52c89b96a3c357c
- MD5 0c35c78072607b52c10596f3da6d31a0
- SHA1 f27b16ffd1bbf2915c7cf4a193b7ce2d8a992da6
- SHA512 8cdbf677ecdea0e8229a5086b2e9eb133f40e33b59ac3bed3c54552be0f96550a8010dfb9368236a9f3a0cfe1ddcacce1659f448f0af59b3c56dd8839994ea56
- SSDEEP 98304:Uu5x6M1Ku5x6M1wu5x6M1uu5x6M1Ku5x6M1wu5x6M1xu5x6M1Ku5x6M1wu5x6M1d:ndPxdPidPxdPtKz9/h1+
- TLSH T15FE67C26F99184F2C66958308B5AA731EB72BD114B61C7C7C394F62D6F331C0AD3662B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry