General
- Target 2026-08-02_cc466c9bb4cd78570926f3baa9c9d1b7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 30.8MB
- Sample260802-3nkx6atera
- SHA256 32190d54ebcb80512b1280a8176ab821adc855cdeb57958eaafe39c31506b85d
- MD5 cc466c9bb4cd78570926f3baa9c9d1b7
- SHA1 e0706675f749a9052d348656faaa9f46bb987fa8
- SHA512 b9c4e634c985ad063d9a41e8f6f944053b70db02950ff3709b072348578751a574f8b1b006f5029e417883dd3cf29333d7bfecd72172d01d488c258f20c2b281
- SSDEEP 196608:JtcIkGnk2VhptcIkGnk2VhitcIkGnk2VhptcIkGnk2Vhlz:I5Gkea5GkeB5Gkea5Gkevz
- TLSH T1FD677C16B2E440E5C199C134CF468632E7B27C198BF197EB6251B6D92F33AD07B3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_cc466c9bb4cd78570926f3baa9c9d1b7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_cc466c9bb4cd78570926f3baa9c9d1b7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_cc466c9bb4cd78570926f3baa9c9d1b7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 30.8MB
- SHA256 32190d54ebcb80512b1280a8176ab821adc855cdeb57958eaafe39c31506b85d
- MD5 cc466c9bb4cd78570926f3baa9c9d1b7
- SHA1 e0706675f749a9052d348656faaa9f46bb987fa8
- SHA512 b9c4e634c985ad063d9a41e8f6f944053b70db02950ff3709b072348578751a574f8b1b006f5029e417883dd3cf29333d7bfecd72172d01d488c258f20c2b281
- SSDEEP 196608:JtcIkGnk2VhptcIkGnk2VhitcIkGnk2VhptcIkGnk2Vhlz:I5Gkea5GkeB5Gkea5Gkevz
- TLSH T1FD677C16B2E440E5C199C134CF468632E7B27C198BF197EB6251B6D92F33AD07B3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry