General
- Target 2026-08-03_7ee6b8411df79004e6e7ea21c415285f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.7MB
- Sample260803-v9edhavaqe
- SHA256 95279d6ca67bd3402ca54e4a8eda474d3402bf69c32bae92ee8253a5828a2199
- MD5 7ee6b8411df79004e6e7ea21c415285f
- SHA1 97e77ba69905c6698dfb73ca059be1d70a386120
- SHA512 4962218e7abed9f5a84263403bdac5fc093e08705932f1aa7835e142f122610e63b4f9279d35c44bf01dd142473627725600624964e1c75a932fdf9c95b1e6c8
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAAToGnow/h1+Qw/h1+WWyZ/K0ttYVAAToGn7:syZ/K0ttYZToGVyZ/K0ttYZToG7
- TLSH T1B1178E17F2E481F5E0A6D174CA669732EB327C054B7096DF2241A7992E33AD0BB39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_7ee6b8411df79004e6e7ea21c415285f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_7ee6b8411df79004e6e7ea21c415285f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_7ee6b8411df79004e6e7ea21c415285f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.7MB
- SHA256 95279d6ca67bd3402ca54e4a8eda474d3402bf69c32bae92ee8253a5828a2199
- MD5 7ee6b8411df79004e6e7ea21c415285f
- SHA1 97e77ba69905c6698dfb73ca059be1d70a386120
- SHA512 4962218e7abed9f5a84263403bdac5fc093e08705932f1aa7835e142f122610e63b4f9279d35c44bf01dd142473627725600624964e1c75a932fdf9c95b1e6c8
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAAToGnow/h1+Qw/h1+WWyZ/K0ttYVAAToGn7:syZ/K0ttYZToGVyZ/K0ttYZToG7
- TLSH T1B1178E17F2E481F5E0A6D174CA669732EB327C054B7096DF2241A7992E33AD0BB39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application