General
- Target 2026-07-29_b8d481ebc0814d9b13a67f6c43709dd3_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 17.2MB
- Sample260729-vncyjsbr8s
- SHA256 fc4eca6a776f2292e79702f719699a8f37eb6604f97df55970ca02429da7a791
- MD5 b8d481ebc0814d9b13a67f6c43709dd3
- SHA1 e102b451abf99311aeac2045bc0ba1b0d01ecb69
- SHA512 11c17150208fea49352e08b9baee7c1167314980fadc46da53cd9d35e715f9941063b81bc35204282a5aeeb3e39481f40062e93f5f5494bd55c97450a9a44027
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzkw5G72Vhij:2cD2cDIEU8IBJkwmeYj
- TLSH T1B107AE17F6A440F9D06AC57486969232EB72BC110B319BCF53A4F6692F33AD05F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_b8d481ebc0814d9b13a67f6c43709dd3_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_b8d481ebc0814d9b13a67f6c43709dd3_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_b8d481ebc0814d9b13a67f6c43709dd3_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 17.2MB
- SHA256 fc4eca6a776f2292e79702f719699a8f37eb6604f97df55970ca02429da7a791
- MD5 b8d481ebc0814d9b13a67f6c43709dd3
- SHA1 e102b451abf99311aeac2045bc0ba1b0d01ecb69
- SHA512 11c17150208fea49352e08b9baee7c1167314980fadc46da53cd9d35e715f9941063b81bc35204282a5aeeb3e39481f40062e93f5f5494bd55c97450a9a44027
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzkw5G72Vhij:2cD2cDIEU8IBJkwmeYj
- TLSH T1B107AE17F6A440F9D06AC57486969232EB72BC110B319BCF53A4F6692F33AD05F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry