General
- Target 2026-07-30_aa3250eeafe82eac887aae6fd2843f49_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.2MB
- Sample260730-vqly8sshkd
- SHA256 6e380ea32fc36cdd6cf624257c31c9aa5b44fe82b80070887d5823157a805384
- MD5 aa3250eeafe82eac887aae6fd2843f49
- SHA1 a1675cf05b4fd490c3a5ff24f5f1c8f53d64097e
- SHA512 996fe7b21b86d32fc2ab160aa29079931594b2e7036b7ecd39f43fde68264fb9d0a4a0fc0fe6f567ae6c12135318bdaee99458d86af0c9350d0b03e28ff88209
- SSDEEP 196608:l8Vb618U68Vb618US18e8Vb618U68Vb618US185/h1+:2cDcyGcDcy
- TLSH T1E8E69D17F69440F5D06AD5748A969236EA72BC520B309BCF4390F7192F33AD0AF3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_aa3250eeafe82eac887aae6fd2843f49_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_aa3250eeafe82eac887aae6fd2843f49_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_aa3250eeafe82eac887aae6fd2843f49_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.2MB
- SHA256 6e380ea32fc36cdd6cf624257c31c9aa5b44fe82b80070887d5823157a805384
- MD5 aa3250eeafe82eac887aae6fd2843f49
- SHA1 a1675cf05b4fd490c3a5ff24f5f1c8f53d64097e
- SHA512 996fe7b21b86d32fc2ab160aa29079931594b2e7036b7ecd39f43fde68264fb9d0a4a0fc0fe6f567ae6c12135318bdaee99458d86af0c9350d0b03e28ff88209
- SSDEEP 196608:l8Vb618U68Vb618US18e8Vb618U68Vb618US185/h1+:2cDcyGcDcy
- TLSH T1E8E69D17F69440F5D06AD5748A969236EA72BC520B309BCF4390F7192F33AD0AF3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry