General
- Target 2026-07-30_c1d2bd057973c6a4fc62608bf035c3cc_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 24.6MB
- Sample260730-bk9cssaq7y
- SHA256 9d07f9fdd2a400e4a49fbe6fe147121654830778843a1268218c0cb990ccb6a0
- MD5 c1d2bd057973c6a4fc62608bf035c3cc
- SHA1 4a9e9f2491f889771856870fc8c33cf8e424c119
- SHA512 846a33632ef00a36f13398c8960e315a77581d573da5a3137d5afcd94f59c7d219bea3822e3e8aefdaaf0775aa510d10ee21271f249825ed74f8697e764fd4b5
- SSDEEP 786432:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYZT/yZ/K0ttYZTO:uZ/K0ttYR6Z/K0ttYRaZ/K0ttYR6Z/Kk
- TLSH T1F8476B03F6E841A9E0AAD174CA769732EB327C594BF1A5DF224076D41E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_c1d2bd057973c6a4fc62608bf035c3cc_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_c1d2bd057973c6a4fc62608bf035c3cc_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_c1d2bd057973c6a4fc62608bf035c3cc_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 24.6MB
- SHA256 9d07f9fdd2a400e4a49fbe6fe147121654830778843a1268218c0cb990ccb6a0
- MD5 c1d2bd057973c6a4fc62608bf035c3cc
- SHA1 4a9e9f2491f889771856870fc8c33cf8e424c119
- SHA512 846a33632ef00a36f13398c8960e315a77581d573da5a3137d5afcd94f59c7d219bea3822e3e8aefdaaf0775aa510d10ee21271f249825ed74f8697e764fd4b5
- SSDEEP 786432:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYZT/yZ/K0ttYZTO:uZ/K0ttYR6Z/K0ttYRaZ/K0ttYR6Z/Kk
- TLSH T1F8476B03F6E841A9E0AAD174CA769732EB327C594BF1A5DF224076D41E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application