General
- Target 2026-08-01_bbf242884888bb5e7875f9ab40bc6a23_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 14.1MB
- Sample260801-tefgmsswfs
- SHA256 a162126d6ae7706bfe621a070aa50629a71ae108e6ee22fafd96d45e36f184f6
- MD5 bbf242884888bb5e7875f9ab40bc6a23
- SHA1 2596aa7ee0357a9030ec84dba4fa8fe609670db4
- SHA512 fb6fea35636766914d5fdfcebe4104feecff9bb52d65a1fb589116fb575eb3ac4f1234e1c365b260eccd4a0c9237c04670c0d82e5b10c5653bc0524b51ad4389
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qX5LapIFoq2Vjnma/h1+iu5x6M1WoD/o:Qi8kLri8kLh5cIFGn//h1+5iKGn
- TLSH T11FE69E0672E441B5D1AAC634CB668632E7B17C154BB0D7DF5251B69E2E337C0BA3A323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_bbf242884888bb5e7875f9ab40bc6a23_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_bbf242884888bb5e7875f9ab40bc6a23_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_bbf242884888bb5e7875f9ab40bc6a23_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 14.1MB
- SHA256 a162126d6ae7706bfe621a070aa50629a71ae108e6ee22fafd96d45e36f184f6
- MD5 bbf242884888bb5e7875f9ab40bc6a23
- SHA1 2596aa7ee0357a9030ec84dba4fa8fe609670db4
- SHA512 fb6fea35636766914d5fdfcebe4104feecff9bb52d65a1fb589116fb575eb3ac4f1234e1c365b260eccd4a0c9237c04670c0d82e5b10c5653bc0524b51ad4389
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qX5LapIFoq2Vjnma/h1+iu5x6M1WoD/o:Qi8kLri8kLh5cIFGn//h1+5iKGn
- TLSH T11FE69E0672E441B5D1AAC634CB668632E7B17C154BB0D7DF5251B69E2E337C0BA3A323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry