General
- Target 2026-08-02_8debd32541f284ef3d00d703a3252628_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 17.9MB
- Sample260802-wancssdm51
- SHA256 097b55c32984bf0b65dfd176cd5856787d842ece6b90e3e0bc5b4f6ed929c8a8
- MD5 8debd32541f284ef3d00d703a3252628
- SHA1 58ff69c673296aa0949447b9919d2a5e9cd59f02
- SHA512 21411c7c748c9f3f509eabe6d7ebdd295bb348da7779fdec3e1afa815db5ab8796b94c90bfb3d8956e95bf5c6ad7017861d4f008359790180c5efff2b3a7b5f3
- SSDEEP 196608:JtcIkGn+oKLtcIkGn+oKXvyEYc/b3w89/h1+:I5G+ob5G+oKvyEYKb
- TLSH T163175A16B6A440E4D0AAC134CB668632E7B27C154FF097EB5251F69E2F336D07E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_8debd32541f284ef3d00d703a3252628_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_8debd32541f284ef3d00d703a3252628_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_8debd32541f284ef3d00d703a3252628_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 17.9MB
- SHA256 097b55c32984bf0b65dfd176cd5856787d842ece6b90e3e0bc5b4f6ed929c8a8
- MD5 8debd32541f284ef3d00d703a3252628
- SHA1 58ff69c673296aa0949447b9919d2a5e9cd59f02
- SHA512 21411c7c748c9f3f509eabe6d7ebdd295bb348da7779fdec3e1afa815db5ab8796b94c90bfb3d8956e95bf5c6ad7017861d4f008359790180c5efff2b3a7b5f3
- SSDEEP 196608:JtcIkGn+oKLtcIkGn+oKXvyEYc/b3w89/h1+:I5G+ob5G+oKvyEYKb
- TLSH T163175A16B6A440E4D0AAC134CB668632E7B27C154FF097EB5251F69E2F336D07E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application