General
- Target 2026-08-03_3c1decf86b403b33829abcc81ca1fa45_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 12.6MB
- Sample260803-w238bshm5t
- SHA256 5700ce1f660b919c8bcb0cf64afdcb9ee970ba74f6615e813d34e677b6581884
- MD5 3c1decf86b403b33829abcc81ca1fa45
- SHA1 4c3e503b3aef7350cfaabe8db815bcc0f3c1706c
- SHA512 1d4d791d562f2aa9202b821fbbdb7d2aae121e0055c3ea2e58ce0c750f75a876dcb581abdb97fd230f54a30a80ba6667fddf334fb072591295b6e23eb92362ca
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtz:2cD2cDIEU8IBJ
- TLSH T13ED6AE17F6A440F5D17A853485A69236EB72BC120B318BCB53A4F66D1F337D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_3c1decf86b403b33829abcc81ca1fa45_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_3c1decf86b403b33829abcc81ca1fa45_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_3c1decf86b403b33829abcc81ca1fa45_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 12.6MB
- SHA256 5700ce1f660b919c8bcb0cf64afdcb9ee970ba74f6615e813d34e677b6581884
- MD5 3c1decf86b403b33829abcc81ca1fa45
- SHA1 4c3e503b3aef7350cfaabe8db815bcc0f3c1706c
- SHA512 1d4d791d562f2aa9202b821fbbdb7d2aae121e0055c3ea2e58ce0c750f75a876dcb581abdb97fd230f54a30a80ba6667fddf334fb072591295b6e23eb92362ca
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtz:2cD2cDIEU8IBJ
- TLSH T13ED6AE17F6A440F5D17A853485A69236EB72BC120B318BCB53A4F66D1F337D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry