General
- Target 2026-07-30_22dbae8d99c5451f4ab983eb349e49b8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 29.0MB
- Sample260730-edpllayfrc
- SHA256 4c7e240c7f562856701c78a4fa009f4f3e2e9e45e5008febabe5f6c9c1d15a14
- MD5 22dbae8d99c5451f4ab983eb349e49b8
- SHA1 86b33f64e7d42411575b45e56055ba784b3ebe9e
- SHA512 d66efe60b91f36a42ab133dd540061e34d909b0e83eabff60ca1457fb4c7eeb114bd8b6b056f1558315dec81179cb0fe064edc62c1365577484b606ffb81011c
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCi8Vb618y8Vb618U68Vb618Ul8Vb618v:2cDcKcDcO3cQcDcKcDcO3clo
- TLSH T1BE678C17F69440F5D16E95308AA69232EA73BC120B7197CB43A4F62D1F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_22dbae8d99c5451f4ab983eb349e49b8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_22dbae8d99c5451f4ab983eb349e49b8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_22dbae8d99c5451f4ab983eb349e49b8_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 29.0MB
- SHA256 4c7e240c7f562856701c78a4fa009f4f3e2e9e45e5008febabe5f6c9c1d15a14
- MD5 22dbae8d99c5451f4ab983eb349e49b8
- SHA1 86b33f64e7d42411575b45e56055ba784b3ebe9e
- SHA512 d66efe60b91f36a42ab133dd540061e34d909b0e83eabff60ca1457fb4c7eeb114bd8b6b056f1558315dec81179cb0fe064edc62c1365577484b606ffb81011c
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCi8Vb618y8Vb618U68Vb618Ul8Vb618v:2cDcKcDcO3cQcDcKcDcO3clo
- TLSH T1BE678C17F69440F5D16E95308AA69232EA73BC120B7197CB43A4F62D1F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry