General
- Target 2026-07-30_abcba137f118873a4482b32d4958d8cd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.5MB
- Sample260730-sgykkabd67
- SHA256 14fd7f8d441c485f8f1b928dd341db1480cd03795d28cf7250258e93e9749204
- MD5 abcba137f118873a4482b32d4958d8cd
- SHA1 40d8a09e39e4d846a17cb8662483789a80cefa1e
- SHA512 b624485098ee8aae2126790b0185b311c745063eff473661ce9d82a16426de4c9ed5286eb0e9d9c7935717db570f6ab2ba98c668288a9cce1df742f9015ab840
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb4e5x6c1QVb6nUm:l8Vb618U68Vbb8Vb61
- TLSH T11166AE17F69444F5D17A993046AA9332EB72BC120B3197CB8364F6191F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_abcba137f118873a4482b32d4958d8cd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_abcba137f118873a4482b32d4958d8cd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_abcba137f118873a4482b32d4958d8cd_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.5MB
- SHA256 14fd7f8d441c485f8f1b928dd341db1480cd03795d28cf7250258e93e9749204
- MD5 abcba137f118873a4482b32d4958d8cd
- SHA1 40d8a09e39e4d846a17cb8662483789a80cefa1e
- SHA512 b624485098ee8aae2126790b0185b311c745063eff473661ce9d82a16426de4c9ed5286eb0e9d9c7935717db570f6ab2ba98c668288a9cce1df742f9015ab840
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb4e5x6c1QVb6nUm:l8Vb618U68Vbb8Vb61
- TLSH T11166AE17F69444F5D17A993046AA9332EB72BC120B3197CB8364F6191F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry