General
- Target 2026-08-02_8ea8e0f5c4cd46b3929404cce5c7e304_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 19.0MB
- Sample260802-ddc25a11c1
- SHA256 bd15389c6d18b7dc8e3a1a7991b742036fd49bebdc8bca33b8bd858bea4da953
- MD5 8ea8e0f5c4cd46b3929404cce5c7e304
- SHA1 27bcd6a65d5da3ce913671135923c1bcae6ca9c1
- SHA512 3ac7aa248f9a5c457bbc15b24aae331b8e469d5c2dfecfdbdebe95c8c43cab9353abf13afae37e71a4b666f0e8ead16ab6ed4b06ba9bf620d22df277db1d4f81
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmHu5x6M1pLapIkoq2VjnmvR7u5x6M1pLapIkoq2VjnmHJ:JtcIkGnNtcIkGnOStcIkGnNtcIkGnOd
- TLSH T189175C1672E440A5C299C134CF568732E3F17C298FF197EBA215B6CD2E336D07A3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_8ea8e0f5c4cd46b3929404cce5c7e304_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_8ea8e0f5c4cd46b3929404cce5c7e304_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_8ea8e0f5c4cd46b3929404cce5c7e304_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 19.0MB
- SHA256 bd15389c6d18b7dc8e3a1a7991b742036fd49bebdc8bca33b8bd858bea4da953
- MD5 8ea8e0f5c4cd46b3929404cce5c7e304
- SHA1 27bcd6a65d5da3ce913671135923c1bcae6ca9c1
- SHA512 3ac7aa248f9a5c457bbc15b24aae331b8e469d5c2dfecfdbdebe95c8c43cab9353abf13afae37e71a4b666f0e8ead16ab6ed4b06ba9bf620d22df277db1d4f81
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmHu5x6M1pLapIkoq2VjnmvR7u5x6M1pLapIkoq2VjnmHJ:JtcIkGnNtcIkGnOStcIkGnNtcIkGnOd
- TLSH T189175C1672E440A5C299C134CF568732E3F17C298FF197EBA215B6CD2E336D07A3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application