General
- Target 2026-08-04_004935a1f4f8c51ad8a574003dc4e727_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 15.6MB
- Sample260804-1byblsywd1
- SHA256 b9004a9efaa6740aba5b5c6158337323377c69d91401541d7f734c7c0140b07e
- MD5 004935a1f4f8c51ad8a574003dc4e727
- SHA1 8ce721c4413775f7c48a9c8f03350ba5a9795203
- SHA512 941a473808db54939e0ab33459de87fcf31d82b89e2766a4c8d61f1b9e6ca44c3f19e277d858d090c48ff6c85d22448b4b028bf21cd48ea0e2f52aa4881594a1
- SSDEEP 196608:l8Vb618U68Vb618US18UZ8Vb618U68Vb618US18UU2VhD/h1+:2cDcy2cDcyIe
- TLSH T18EF69D17F69440F9D06AD47486969636EA72BC520B31ABCF0390F7592F33AD06F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_004935a1f4f8c51ad8a574003dc4e727_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_004935a1f4f8c51ad8a574003dc4e727_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_004935a1f4f8c51ad8a574003dc4e727_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 15.6MB
- SHA256 b9004a9efaa6740aba5b5c6158337323377c69d91401541d7f734c7c0140b07e
- MD5 004935a1f4f8c51ad8a574003dc4e727
- SHA1 8ce721c4413775f7c48a9c8f03350ba5a9795203
- SHA512 941a473808db54939e0ab33459de87fcf31d82b89e2766a4c8d61f1b9e6ca44c3f19e277d858d090c48ff6c85d22448b4b028bf21cd48ea0e2f52aa4881594a1
- SSDEEP 196608:l8Vb618U68Vb618US18UZ8Vb618U68Vb618US18UU2VhD/h1+:2cDcy2cDcyIe
- TLSH T18EF69D17F69440F9D06AD47486969636EA72BC520B31ABCF0390F7592F33AD06F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry