General
- Target 2026-08-02_47fb376233944aa0688d2bf65e21159c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 16.5MB
- Sample260802-xd3gkazbkf
- SHA256 1961171f4118c969de66e1a79a88426b06cc38deb1e0172dcd67950659683cfa
- MD5 47fb376233944aa0688d2bf65e21159c
- SHA1 1be0b83cf8a7e75771e577a6d666b26a27c78a59
- SHA512 91a11a51926a27758ff8891d212f35fc71a67bdb4c60c30f799884158d4f515eca1c009dc8f258785cc317f63d856e99b3392479c58f18c151e862d307422771
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmUoq2VjnmSnUm8UZu5x6M1pLapIkoq2VjnmUoq2VjnmSR:JtcIkGnfGn918U+tcIkGnfGn918UTD
- TLSH T108076C1676A481E4C1AAC274CF568622E3B17C154FF097EF5255B2CE2E33AD07E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_47fb376233944aa0688d2bf65e21159c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_47fb376233944aa0688d2bf65e21159c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_47fb376233944aa0688d2bf65e21159c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 16.5MB
- SHA256 1961171f4118c969de66e1a79a88426b06cc38deb1e0172dcd67950659683cfa
- MD5 47fb376233944aa0688d2bf65e21159c
- SHA1 1be0b83cf8a7e75771e577a6d666b26a27c78a59
- SHA512 91a11a51926a27758ff8891d212f35fc71a67bdb4c60c30f799884158d4f515eca1c009dc8f258785cc317f63d856e99b3392479c58f18c151e862d307422771
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmUoq2VjnmSnUm8UZu5x6M1pLapIkoq2VjnmUoq2VjnmSR:JtcIkGnfGn918U+tcIkGnfGn918UTD
- TLSH T108076C1676A481E4C1AAC274CF568622E3B17C154FF097EF5255B2CE2E33AD07E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry