General
- Target 2026-08-03_c830990abf8a79d7b401a7a79400b10a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.7MB
- Sample260803-vftw4afp3v
- SHA256 be4a76797a3403ea52e6970b213fb9e43d432b1990388ce638a704c1e26d83d5
- MD5 c830990abf8a79d7b401a7a79400b10a
- SHA1 1bdbea6ab563bfdbbabc755110831ebfceda6cc1
- SHA512 7a70e324389aa5a68adf5ff61edf191d48e46e0a8c68b700604ab10b39bb29913ed3fee804a92d7b1daae16c8f480eac85092f362511285fa0e6f4ad8e91ec70
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAAToGnow/h1+Qw/h1+WWyZ/K0ttYVAAToGnt:syZ/K0ttYZToGVyZ/K0ttYZToGt
- TLSH T101178E17F2E481F5E0A6D174CA669732EB327C054B7096DF2241A7992E33AD0BB39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_c830990abf8a79d7b401a7a79400b10a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_c830990abf8a79d7b401a7a79400b10a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c830990abf8a79d7b401a7a79400b10a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.7MB
- SHA256 be4a76797a3403ea52e6970b213fb9e43d432b1990388ce638a704c1e26d83d5
- MD5 c830990abf8a79d7b401a7a79400b10a
- SHA1 1bdbea6ab563bfdbbabc755110831ebfceda6cc1
- SHA512 7a70e324389aa5a68adf5ff61edf191d48e46e0a8c68b700604ab10b39bb29913ed3fee804a92d7b1daae16c8f480eac85092f362511285fa0e6f4ad8e91ec70
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAAToGnow/h1+Qw/h1+WWyZ/K0ttYVAAToGnt:syZ/K0ttYZToGVyZ/K0ttYZToGt
- TLSH T101178E17F2E481F5E0A6D174CA669732EB327C054B7096DF2241A7992E33AD0BB39731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry