General
- Target 2026-07-30_dd349f8a525efc9c1b2a424f4e6f4dbf_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 28.2MB
- Sample260730-daplra1wgx
- SHA256 20298216b3b6736322353a661dda4a4e39222d40aa6ffe02cdb74e9e47768571
- MD5 dd349f8a525efc9c1b2a424f4e6f4dbf
- SHA1 40e2a5be782d4adf8d36894f94ffefdefb00a58d
- SHA512 7b20aadfc4095fcd9dcf36be6f03ead042abcd22bf25c7b1897eee4d83afcb4ce55425a64e0c0b85bb8ad0a17246687c9c3372297ae0ec3a05c837cacab119a5
- SSDEEP 196608:ndPCKzgUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHJ/h1+:8K0UEtQevvqc2W1cpV2XI32
- TLSH T113575B91BBE443E2D3AA953489B182B6EBB17C1E1F31937B4139F21E1F376905D29321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_dd349f8a525efc9c1b2a424f4e6f4dbf_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_dd349f8a525efc9c1b2a424f4e6f4dbf_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_dd349f8a525efc9c1b2a424f4e6f4dbf_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 28.2MB
- SHA256 20298216b3b6736322353a661dda4a4e39222d40aa6ffe02cdb74e9e47768571
- MD5 dd349f8a525efc9c1b2a424f4e6f4dbf
- SHA1 40e2a5be782d4adf8d36894f94ffefdefb00a58d
- SHA512 7b20aadfc4095fcd9dcf36be6f03ead042abcd22bf25c7b1897eee4d83afcb4ce55425a64e0c0b85bb8ad0a17246687c9c3372297ae0ec3a05c837cacab119a5
- SSDEEP 196608:ndPCKzgUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHJ/h1+:8K0UEtQevvqc2W1cpV2XI32
- TLSH T113575B91BBE443E2D3AA953489B182B6EBB17C1E1F31937B4139F21E1F376905D29321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry