General
- Target 2026-08-04_1fe69ff8749760fff037d69202869f93_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 30.8MB
- Sample260804-298exafp9t
- SHA256 a312a10ff22d98e19fcb55260896569800978ca9df67b27af32fe2a820788aa3
- MD5 1fe69ff8749760fff037d69202869f93
- SHA1 183c359d26b1223ef939d928d0bb3e333f25ff89
- SHA512 bc0720b0befd3bf29b3ffd65cd4bef1bb3b57c758adefcc49945bf1361aefe8b8ca20a6a099d8b911ca859ded5af5542e3f5f159271cbdaea4fc12e3e98df3a4
- SSDEEP 393216:2cD2cDxyZ/K0ttYZTQcD2cDxyZ/K0ttYZT4o:tZ9yZ/K0ttYZTzZ9yZ/K0ttYZT5
- TLSH T12A678D13F6E440E5E1BAD534CA669232EB32BC550B7196CF1250F6992E33AD0BF39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_1fe69ff8749760fff037d69202869f93_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_1fe69ff8749760fff037d69202869f93_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_1fe69ff8749760fff037d69202869f93_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 30.8MB
- SHA256 a312a10ff22d98e19fcb55260896569800978ca9df67b27af32fe2a820788aa3
- MD5 1fe69ff8749760fff037d69202869f93
- SHA1 183c359d26b1223ef939d928d0bb3e333f25ff89
- SHA512 bc0720b0befd3bf29b3ffd65cd4bef1bb3b57c758adefcc49945bf1361aefe8b8ca20a6a099d8b911ca859ded5af5542e3f5f159271cbdaea4fc12e3e98df3a4
- SSDEEP 393216:2cD2cDxyZ/K0ttYZTQcD2cDxyZ/K0ttYZT4o:tZ9yZ/K0ttYZTzZ9yZ/K0ttYZT5
- TLSH T12A678D13F6E440E5E1BAD534CA669232EB32BC550B7196CF1250F6992E33AD0BF39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry