General
- Target 2026-08-03_0d0b15ad2e9d00511071b08edabd7850_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 11.5MB
- Sample260803-xlytcaweph
- SHA256 750805a8779e431f691eb3ca3811695b5e4f17fa62f22e2cc410a0c1b9090c1f
- MD5 0d0b15ad2e9d00511071b08edabd7850
- SHA1 3a1c014f2caf2b34e4a00707fac0eef8801bdcda
- SHA512 41eb7c1728aea56986cffcbe86931f57c4e1c49ea30aecbb19cf1bc3a9bdf65733489491e3ce57ca15e5cbceff45320cce7c99d38a25e9c8025979a7b160c36f
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+ReWyZ/K0ttYVAATEoPb:YZyZ/K0ttYZT7z
- TLSH T10FC68D13F5A481B5E076D074C9A6A736EB327C454B7186CB2241E7A82E376D0BF3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_0d0b15ad2e9d00511071b08edabd7850_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_0d0b15ad2e9d00511071b08edabd7850_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_0d0b15ad2e9d00511071b08edabd7850_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 11.5MB
- SHA256 750805a8779e431f691eb3ca3811695b5e4f17fa62f22e2cc410a0c1b9090c1f
- MD5 0d0b15ad2e9d00511071b08edabd7850
- SHA1 3a1c014f2caf2b34e4a00707fac0eef8801bdcda
- SHA512 41eb7c1728aea56986cffcbe86931f57c4e1c49ea30aecbb19cf1bc3a9bdf65733489491e3ce57ca15e5cbceff45320cce7c99d38a25e9c8025979a7b160c36f
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+ReWyZ/K0ttYVAATEoPb:YZyZ/K0ttYZT7z
- TLSH T10FC68D13F5A481B5E076D074C9A6A736EB327C454B7186CB2241E7A82E376D0BF3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry