General
- Target 2026-08-02_7b1a15359003aa69129bdb3ef2b5892d_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar
- Size 3.9MB
- Sample260802-wlgz6aycna
- SHA256 7b7686e1d60790c51bc0539a5744bc8ee7cb4b6f1362ecc6e15bd4ea7d855b5c
- MD5 7b1a15359003aa69129bdb3ef2b5892d
- SHA1 1c3fd7823e3722ff08d2a1b63b4646a45a5d89ac
- SHA512 d6460f80086a11f6905863ed708d8639ba1ce37d49cc5d95a7035d5c1488d45dac9a1d9ccb6fbe9f991bc9c00c782aa35da4009be5a5d9a6c0bcf3bd0a6596e6
- SSDEEP 98304:njBxcO4EYlj8jBxcO4EYlj8jBxcO4EYlj8jBxcO4EYlja2UgXq9ouFkULGyqo5:njBxcO4Vj8jBxcO4Vj8jBxcO4Vj8jBxD
- TLSH T16C169E02B7D18075ECB312B1557EBB3A8639F920072196CF9784DC69BF726C19A39363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_7b1a15359003aa69129bdb3ef2b5892d_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_7b1a15359003aa69129bdb3ef2b5892d_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_7b1a15359003aa69129bdb3ef2b5892d_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar
- Size 3.9MB
- SHA256 7b7686e1d60790c51bc0539a5744bc8ee7cb4b6f1362ecc6e15bd4ea7d855b5c
- MD5 7b1a15359003aa69129bdb3ef2b5892d
- SHA1 1c3fd7823e3722ff08d2a1b63b4646a45a5d89ac
- SHA512 d6460f80086a11f6905863ed708d8639ba1ce37d49cc5d95a7035d5c1488d45dac9a1d9ccb6fbe9f991bc9c00c782aa35da4009be5a5d9a6c0bcf3bd0a6596e6
- SSDEEP 98304:njBxcO4EYlj8jBxcO4EYlj8jBxcO4EYlj8jBxcO4EYlja2UgXq9ouFkULGyqo5:njBxcO4Vj8jBxcO4Vj8jBxcO4Vj8jBxD
- TLSH T16C169E02B7D18075ECB312B1557EBB3A8639F920072196CF9784DC69BF726C19A39363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory