General
- Target 2026-08-01_5b886777970f4d4c6a418b70be355d01_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 21.2MB
- Sample260802-a1ebxszzew
- SHA256 493c00c926c99416f54fc926702c52d072dec1aa6e933f43fe25f85c9a1fc0de
- MD5 5b886777970f4d4c6a418b70be355d01
- SHA1 1672574dd2c23e56f915efa8bd226807e90c64ee
- SHA512 315e2e2149757678a35a6e52cea32fc6f4c7121428dac92efdd1b4fd8fa9bba15b5a0fcb1fd2f6cbb61c6cdf204b87eab8a48e3ae139712a2af96b5b4b6af017
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vbe8Vb618U68Vb618US18Ufh8Vb+vyEYc/b3w89/G:2cDcy+JcDcy+svyEYKb
- TLSH T15F278D16BBA440F5E17AD5348A668672EB727C120B319BCF4390F61D2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_5b886777970f4d4c6a418b70be355d01_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_5b886777970f4d4c6a418b70be355d01_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_5b886777970f4d4c6a418b70be355d01_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 21.2MB
- SHA256 493c00c926c99416f54fc926702c52d072dec1aa6e933f43fe25f85c9a1fc0de
- MD5 5b886777970f4d4c6a418b70be355d01
- SHA1 1672574dd2c23e56f915efa8bd226807e90c64ee
- SHA512 315e2e2149757678a35a6e52cea32fc6f4c7121428dac92efdd1b4fd8fa9bba15b5a0fcb1fd2f6cbb61c6cdf204b87eab8a48e3ae139712a2af96b5b4b6af017
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vbe8Vb618U68Vb618US18Ufh8Vb+vyEYc/b3w89/G:2cDcy+JcDcy+svyEYKb
- TLSH T15F278D16BBA440F5E17AD5348A668672EB727C120B319BCF4390F61D2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry