General

  • Target
    2026-08-02_d7aeec018f8966ce35001914d4ad228b_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop_vidar
  • Size 3.5MB
  • Sample260802-mq9fja1cle
  • SHA256 0920bae537f8967455262912a7372699b53ba2fefae2fcc38a3e98864f137caa
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-02_d7aeec018f8966ce35001914d4ad228b_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop_vidar
    • Size 3.5MB
    • SHA256 0920bae537f8967455262912a7372699b53ba2fefae2fcc38a3e98864f137caa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies WinLogon for persistence

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks