General
- Target 2026-08-01_ce5a06837cc16c2503c8d822a4f64f4d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 20.5MB
- Sample260801-3rc2qazckf
- SHA256 ad15e49d40a15241e3a3aeb2aa6258343189baaff7ac401d45a1c6a8c7863eef
- MD5 ce5a06837cc16c2503c8d822a4f64f4d
- SHA1 1057785e86d7cf998011b0951dd97fb4c6e53430
- SHA512 3d67a9d8b1eef0d42ea77bb70330bb601f154fa3ab9dd72a5b21f85b67214e8e85684d98513a44036dd2df7b4c76ee14baae7a357abe2d11c69e447486a81645
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vbe8Vb618U68Vb618US18Ufh8Vb+vyEYc/b3w8:2cDcy+JcDcy+svyEYKb
- TLSH T16A278D16BBA440F5E17AD5348A668632EB72BC520B319BCF4390F61D2F336D05E3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_ce5a06837cc16c2503c8d822a4f64f4d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_ce5a06837cc16c2503c8d822a4f64f4d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_ce5a06837cc16c2503c8d822a4f64f4d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 20.5MB
- SHA256 ad15e49d40a15241e3a3aeb2aa6258343189baaff7ac401d45a1c6a8c7863eef
- MD5 ce5a06837cc16c2503c8d822a4f64f4d
- SHA1 1057785e86d7cf998011b0951dd97fb4c6e53430
- SHA512 3d67a9d8b1eef0d42ea77bb70330bb601f154fa3ab9dd72a5b21f85b67214e8e85684d98513a44036dd2df7b4c76ee14baae7a357abe2d11c69e447486a81645
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vbe8Vb618U68Vb618US18Ufh8Vb+vyEYc/b3w8:2cDcy+JcDcy+svyEYKb
- TLSH T16A278D16BBA440F5E17AD5348A668632EB72BC520B319BCF4390F61D2F336D05E3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application