General
- Target 2026-07-30_fe2f97273a35a0809db1d894e501bac0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 61.6MB
- Sample260730-xntmeaea77
- SHA256 42cc333fb3e24fb29cedf60536aa1834eb0e19c261dc3c1499712c28a1e59a42
- MD5 fe2f97273a35a0809db1d894e501bac0
- SHA1 5a700f8a956c2fa548a7600db5ed861590ac5bd0
- SHA512 35038fabfdd4d228528619ff5f6727f40f514a6f8d46ddcf6d163a72292298d122891b2cd4fc98502f36fa9523f107eed58164aaadf648a88607106c7d951227
- SSDEEP 786432:tAy1fjpNkAy1fjpNtAy1fjpNkAy1fjpNn:tAy1fjbkAy1fjbtAy1fjbkAy1fjbn
- TLSH T122E78C13F6A940E9E06ED5748B659332EA72BC524B30A6CF4390F6191F33AD05F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_fe2f97273a35a0809db1d894e501bac0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_fe2f97273a35a0809db1d894e501bac0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_fe2f97273a35a0809db1d894e501bac0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 61.6MB
- SHA256 42cc333fb3e24fb29cedf60536aa1834eb0e19c261dc3c1499712c28a1e59a42
- MD5 fe2f97273a35a0809db1d894e501bac0
- SHA1 5a700f8a956c2fa548a7600db5ed861590ac5bd0
- SHA512 35038fabfdd4d228528619ff5f6727f40f514a6f8d46ddcf6d163a72292298d122891b2cd4fc98502f36fa9523f107eed58164aaadf648a88607106c7d951227
- SSDEEP 786432:tAy1fjpNkAy1fjpNtAy1fjpNkAy1fjpNn:tAy1fjbkAy1fjbtAy1fjbkAy1fjbn
- TLSH T122E78C13F6A940E9E06ED5748B659332EA72BC524B30A6CF4390F6191F33AD05F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry