General
- Target 2026-08-04_b5e3f31b1529bbab1bbe3bb778b1c34a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 22.4MB
- Sample260804-2brdqszsaz
- SHA256 d013fadb0221b12e42f20565ae57d0506b1eafe8a25270d9db059d504cb60804
- MD5 b5e3f31b1529bbab1bbe3bb778b1c34a
- SHA1 fc74c79122ac31914731c1308c32b38d5829f159
- SHA512 0563da390d4c5e5817660614f4d8a618f913c0c1cc3074ac489225b99b1cc3d3a1d231a28c67f985a21629b527a25ae590f8661d490097b0acb98dccda6fc688
- SSDEEP 196608:JtcITtcIIO6cIFGnotcITtcIIO6cIFGnJKz:IBhCQGRBhCQGJK
- TLSH T127374A2671F141A5C199C075CF469732E3E23C698FF087EBA145B2D92F339D07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_b5e3f31b1529bbab1bbe3bb778b1c34a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_b5e3f31b1529bbab1bbe3bb778b1c34a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_b5e3f31b1529bbab1bbe3bb778b1c34a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 22.4MB
- SHA256 d013fadb0221b12e42f20565ae57d0506b1eafe8a25270d9db059d504cb60804
- MD5 b5e3f31b1529bbab1bbe3bb778b1c34a
- SHA1 fc74c79122ac31914731c1308c32b38d5829f159
- SHA512 0563da390d4c5e5817660614f4d8a618f913c0c1cc3074ac489225b99b1cc3d3a1d231a28c67f985a21629b527a25ae590f8661d490097b0acb98dccda6fc688
- SSDEEP 196608:JtcITtcIIO6cIFGnotcITtcIIO6cIFGnJKz:IBhCQGRBhCQGJK
- TLSH T127374A2671F141A5C199C075CF469732E3E23C698FF087EBA145B2D92F339D07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry