General
- Target 2026-07-30_d81b9c0995ba82616e9af9bd01f89bf8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.7MB
- Sample260730-11f4mayajf
- SHA256 605c38de00f923fac06a53edbaccbeafa6a0fab0a130db3481d7863a74be38a2
- MD5 d81b9c0995ba82616e9af9bd01f89bf8
- SHA1 24a5d5a2c65244b1f3eb6d96088d44387dcb8796
- SHA512 855d7dd330736228cf60f284ee14842870567db5ee8b023fe275003f04627e8a7d633088e19c2591bd429b594c0d5ee3257d5bfcdc9bde99aabebcdd173c6a8f
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7AdCz:JtcI4/h1+kov7AgtcI4/h1+kov7A0z
- TLSH T1B1964A22B1E14165C1AAC035CF929735D7B23C598BF0C7DB6245B2D92F336D0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_d81b9c0995ba82616e9af9bd01f89bf8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_d81b9c0995ba82616e9af9bd01f89bf8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_d81b9c0995ba82616e9af9bd01f89bf8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.7MB
- SHA256 605c38de00f923fac06a53edbaccbeafa6a0fab0a130db3481d7863a74be38a2
- MD5 d81b9c0995ba82616e9af9bd01f89bf8
- SHA1 24a5d5a2c65244b1f3eb6d96088d44387dcb8796
- SHA512 855d7dd330736228cf60f284ee14842870567db5ee8b023fe275003f04627e8a7d633088e19c2591bd429b594c0d5ee3257d5bfcdc9bde99aabebcdd173c6a8f
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7AdCz:JtcI4/h1+kov7AgtcI4/h1+kov7A0z
- TLSH T1B1964A22B1E14165C1AAC035CF929735D7B23C598BF0C7DB6245B2D92F336D0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry