General
- Target 2026-08-02_071dd2cb58eb772118fd634aa3adc207_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 52.8MB
- Sample260802-13l3nage37
- SHA256 8eec5b305217559c27c2cc4c172bc6d133b57f75f6a9d03d1575ea2b56fbe548
- MD5 071dd2cb58eb772118fd634aa3adc207
- SHA1 43f558aa8ca5184bc95e39b3d550749fa2647205
- SHA512 73e3d8e8e6199ea1b69b3533b87a7d716baec3cd975b03585a2eb2d55b7d345448c510620618e7cc12fc070e6c07b5fa5593d0f4c06cdee2ca53fbc70fdd8719
- SSDEEP 393216:I5G+ob5G+oo5G+ob5G+ogE5G+ob5G+oo5G+ob5G+oge:I47b47o47b47H47b47o47b47L
- TLSH T109C76B16B6E440E5C1AAC134CF568632E7B17C294FF097EB6255B2C92E33AD07E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_071dd2cb58eb772118fd634aa3adc207_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_071dd2cb58eb772118fd634aa3adc207_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_071dd2cb58eb772118fd634aa3adc207_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 52.8MB
- SHA256 8eec5b305217559c27c2cc4c172bc6d133b57f75f6a9d03d1575ea2b56fbe548
- MD5 071dd2cb58eb772118fd634aa3adc207
- SHA1 43f558aa8ca5184bc95e39b3d550749fa2647205
- SHA512 73e3d8e8e6199ea1b69b3533b87a7d716baec3cd975b03585a2eb2d55b7d345448c510620618e7cc12fc070e6c07b5fa5593d0f4c06cdee2ca53fbc70fdd8719
- SSDEEP 393216:I5G+ob5G+oo5G+ob5G+ogE5G+ob5G+oo5G+ob5G+oge:I47b47o47b47H47b47o47b47L
- TLSH T109C76B16B6E440E5C1AAC134CF568632E7B17C294FF097EB6255B2C92E33AD07E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry