General
- Target 2026-08-03_c8d9815f36542b47cef45b4585c20e29_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 18.3MB
- Sample260803-vfglrstdlh
- SHA256 c5646012c62c07c7a5ee10546db620b9b83ac67b6374574f36d63042eb5b276f
- MD5 c8d9815f36542b47cef45b4585c20e29
- SHA1 4e8cc0785c5ff297dd9ca9ab34267bef147fde4b
- SHA512 3e78aae20c1777951fbd2add150b6a3ed80f5a6a24325a586037c5b0da2795413aba2e5617c1adad7c8fc9cd7e5af071f27b90e29596c4bde79be2cdf3ee8838
- SSDEEP 98304:Su5x6M1pLapIkoq2Vjnmd+YPppCpU2hyu5x6M1pLapIkoq2Vjnmd+YPppCpU2h86:JtcIkGnk2VhptcIkGnk2VhioK3odG
- TLSH T1E1178C17B2A440E5C0AAC174CB868632E7B17C594BB097EF5251B7D92F33AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_c8d9815f36542b47cef45b4585c20e29_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_c8d9815f36542b47cef45b4585c20e29_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c8d9815f36542b47cef45b4585c20e29_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 18.3MB
- SHA256 c5646012c62c07c7a5ee10546db620b9b83ac67b6374574f36d63042eb5b276f
- MD5 c8d9815f36542b47cef45b4585c20e29
- SHA1 4e8cc0785c5ff297dd9ca9ab34267bef147fde4b
- SHA512 3e78aae20c1777951fbd2add150b6a3ed80f5a6a24325a586037c5b0da2795413aba2e5617c1adad7c8fc9cd7e5af071f27b90e29596c4bde79be2cdf3ee8838
- SSDEEP 98304:Su5x6M1pLapIkoq2Vjnmd+YPppCpU2hyu5x6M1pLapIkoq2Vjnmd+YPppCpU2h86:JtcIkGnk2VhptcIkGnk2VhioK3odG
- TLSH T1E1178C17B2A440E5C0AAC174CB868632E7B17C594BB097EF5251B7D92F33AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry