General
- Target 2026-08-01_7905a98c0185f1ce918505ff4a7412ad_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 20.1MB
- Sample260802-arcfzazyfw
- SHA256 0910f910a8313d8a79bdd46104bdd5296444a3a51052a9d1dece9b9912438862
- MD5 7905a98c0185f1ce918505ff4a7412ad
- SHA1 764e5b9795a6e329bfe85d7aa8c780c8476342eb
- SHA512 58cb15eb75bae1baabfa32e75324240518992339a0c7c4b86cc2b591d8129e02d82ee41e0ebfd0a24d7fa8d3c4e757fc06100f9760c78e0ec7ee39adbf6a98a3
- SSDEEP 196608:Qi8kLri8kLSGnhi8kLri8kLSGn5WqQI0pyN/h1+:IkLDkLSGNkLDkLSG5WqQjp
- TLSH T1FA279F03B7E441A9E0BAC67496768632EB727C455B30D7DF1294B61E2E33BD09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_7905a98c0185f1ce918505ff4a7412ad_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_7905a98c0185f1ce918505ff4a7412ad_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_7905a98c0185f1ce918505ff4a7412ad_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 20.1MB
- SHA256 0910f910a8313d8a79bdd46104bdd5296444a3a51052a9d1dece9b9912438862
- MD5 7905a98c0185f1ce918505ff4a7412ad
- SHA1 764e5b9795a6e329bfe85d7aa8c780c8476342eb
- SHA512 58cb15eb75bae1baabfa32e75324240518992339a0c7c4b86cc2b591d8129e02d82ee41e0ebfd0a24d7fa8d3c4e757fc06100f9760c78e0ec7ee39adbf6a98a3
- SSDEEP 196608:Qi8kLri8kLSGnhi8kLri8kLSGn5WqQI0pyN/h1+:IkLDkLSGNkLDkLSG5WqQjp
- TLSH T1FA279F03B7E441A9E0BAC67496768632EB727C455B30D7DF1294B61E2E33BD09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry