General
- Target 2026-08-01_50353b3724533f0850371760a93e2875_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 41.1MB
- Sample260802-a4snqa1cnf
- SHA256 94204e1c89b8204ee497f2fb4f084cddb158a6f34c9dcf09e390456cf04bb454
- MD5 50353b3724533f0850371760a93e2875
- SHA1 71fc91509bc83dcf5307f40a7eb7079568fff036
- SHA512 1cb0c8a9dbfc379ef8c7fade50fdea69bccc0f84b9e5e4e33618594d437e52efaac448df1bf57f57ede21b3dd94428f25e69e0930943c51c5ab7440d4cfc76d9
- SSDEEP 196608:JtcIkGnk2VhptcIkGnk2VhitcIkGnk2VhptcIkGnk2Vhl9tcIkGnk2VhptcIkE:I5Gkea5GkeB5Gkea5Gkev05Gkea5E
- TLSH T150977C16B2E440E5C199C134CF468632E7B27C198BF097EB6251B6D92F33AD07B3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_50353b3724533f0850371760a93e2875_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_50353b3724533f0850371760a93e2875_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_50353b3724533f0850371760a93e2875_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 41.1MB
- SHA256 94204e1c89b8204ee497f2fb4f084cddb158a6f34c9dcf09e390456cf04bb454
- MD5 50353b3724533f0850371760a93e2875
- SHA1 71fc91509bc83dcf5307f40a7eb7079568fff036
- SHA512 1cb0c8a9dbfc379ef8c7fade50fdea69bccc0f84b9e5e4e33618594d437e52efaac448df1bf57f57ede21b3dd94428f25e69e0930943c51c5ab7440d4cfc76d9
- SSDEEP 196608:JtcIkGnk2VhptcIkGnk2VhitcIkGnk2VhptcIkGnk2Vhl9tcIkGnk2VhptcIkE:I5Gkea5GkeB5Gkea5Gkev05Gkea5E
- TLSH T150977C16B2E440E5C199C134CF468632E7B27C198BF097EB6251B6D92F33AD07B3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application