General
- Target 2026-07-30_433f8ba40a3eabc1c87f9dc3d334bcbf_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 31.4MB
- Sample260730-d572ksyene
- SHA256 29d47a3fb7aa19da4ddda439ebd52f6ea229bc37515564a3eded402ae3358b7a
- MD5 433f8ba40a3eabc1c87f9dc3d334bcbf
- SHA1 2d6c268b453da07bfb445f9d2e7785ca1419d460
- SHA512 b1dfa942f988413c85157162f92ff254daa4f4ba1d4b3a0b18404145e0cba7e202c6f4cb7243df2e7beaf717005d9dde5d677e7c36b8ca881c1682c3aa59a282
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18Uxp8Vb618U68Vb618US18Ui8+:2cDcyjcDcylacDcyjcDcyl2WqQjp
- TLSH T156778D17F6A540F9E06AD57486659332EA72BC520B31AACF0390F7192F33AD05F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_433f8ba40a3eabc1c87f9dc3d334bcbf_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_433f8ba40a3eabc1c87f9dc3d334bcbf_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_433f8ba40a3eabc1c87f9dc3d334bcbf_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 31.4MB
- SHA256 29d47a3fb7aa19da4ddda439ebd52f6ea229bc37515564a3eded402ae3358b7a
- MD5 433f8ba40a3eabc1c87f9dc3d334bcbf
- SHA1 2d6c268b453da07bfb445f9d2e7785ca1419d460
- SHA512 b1dfa942f988413c85157162f92ff254daa4f4ba1d4b3a0b18404145e0cba7e202c6f4cb7243df2e7beaf717005d9dde5d677e7c36b8ca881c1682c3aa59a282
- SSDEEP 196608:l8Vb618U68Vb618US18Ui8Vb618U68Vb618US18Uxp8Vb618U68Vb618US18Ui8+:2cDcyjcDcylacDcyjcDcyl2WqQjp
- TLSH T156778D17F6A540F9E06AD57486659332EA72BC520B31AACF0390F7192F33AD05F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry