General
- Target 2026-08-02_80d3be87252284c1770d89c626c31ef7_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar
- Size 6.1MB
- Sample260802-gp615adq3w
- SHA256 227f4b694ded73256a98ff0d4b2b0a0970dbd214b6d8c3c87b808d0e5d2a1463
- MD5 80d3be87252284c1770d89c626c31ef7
- SHA1 cd861c7c73176f76ff1f0cc549907b506507f577
- SHA512 9e56f5ffc6658e4d701f3580a9004ef6dd1a8647710d32d2bbef62b35ec56ed7ad402b063ac3db6fe32d853a0d0842820975b92a63df650dd21fb7131a3e99c2
- SSDEEP 196608:njBxcO4VjMUjRjBxcO4VjMUjRjBxcO4VjMUjH18Utd0j:XnSnSnQ3I
- TLSH T115568C02B3D580B4E4B25170CE6A96369735BC640BF196DF3344BAD96E73AD07E39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_80d3be87252284c1770d89c626c31ef7_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_80d3be87252284c1770d89c626c31ef7_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_80d3be87252284c1770d89c626c31ef7_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar
- Size 6.1MB
- SHA256 227f4b694ded73256a98ff0d4b2b0a0970dbd214b6d8c3c87b808d0e5d2a1463
- MD5 80d3be87252284c1770d89c626c31ef7
- SHA1 cd861c7c73176f76ff1f0cc549907b506507f577
- SHA512 9e56f5ffc6658e4d701f3580a9004ef6dd1a8647710d32d2bbef62b35ec56ed7ad402b063ac3db6fe32d853a0d0842820975b92a63df650dd21fb7131a3e99c2
- SSDEEP 196608:njBxcO4VjMUjRjBxcO4VjMUjRjBxcO4VjMUjH18Utd0j:XnSnSnQ3I
- TLSH T115568C02B3D580B4E4B25170CE6A96369735BC640BF196DF3344BAD96E73AD07E39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory