General
- Target 2026-07-29_bec1e54cc3fc99450b20aaf55674259c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.4MB
- Sample260729-mnehdatxez
- SHA256 ea7bf765e76a27af60f0afb937f09e0c17a88b87aad86de5696dbb7ade6f1700
- MD5 bec1e54cc3fc99450b20aaf55674259c
- SHA1 87bfa36391856e224ac874d6cb489dc57cbb0f59
- SHA512 3e2564791ec39ac2275414426c9c9194980a5f9eaf82cc3744f78eeee8d950315e38d108a8a90f8480eeb833f83cf4da0bd1ac6c8d300fa53aba3de401698c6f
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7AI:JtcI4/h1+kov7AgtcI4/h1+kov7AI
- TLSH T118964A22B1E14165C1AAC071CF929735D7B23C598BF0C7DB6245B2D92F336D0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_bec1e54cc3fc99450b20aaf55674259c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_bec1e54cc3fc99450b20aaf55674259c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_bec1e54cc3fc99450b20aaf55674259c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.4MB
- SHA256 ea7bf765e76a27af60f0afb937f09e0c17a88b87aad86de5696dbb7ade6f1700
- MD5 bec1e54cc3fc99450b20aaf55674259c
- SHA1 87bfa36391856e224ac874d6cb489dc57cbb0f59
- SHA512 3e2564791ec39ac2275414426c9c9194980a5f9eaf82cc3744f78eeee8d950315e38d108a8a90f8480eeb833f83cf4da0bd1ac6c8d300fa53aba3de401698c6f
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7AI:JtcI4/h1+kov7AgtcI4/h1+kov7AI
- TLSH T118964A22B1E14165C1AAC071CF929735D7B23C598BF0C7DB6245B2D92F336D0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry