General
- Target 2026-08-04_a07e4a43795ff2797ff1b0b3f265e6d8_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.3MB
- Sample260804-2gg29azshz
- SHA256 8f7b6ec385544cabea5c4f79d41d4db33961953126c478cf947c50fe4c70ca62
- MD5 a07e4a43795ff2797ff1b0b3f265e6d8
- SHA1 9745fb999585388ea201f179cde83214257bcb8f
- SHA512 a3b5f7e8c58c6cc72444a0a88c7ebae98dcc7d7003243b6b573bcada872c3b64022b082d7cbcddc2bf87777b76aa1bc896b001b2267887c9b7b6a5a4d2b5aabc
- SSDEEP 98304:+e5x6c1w+q0XlBhs6sTIg/EdezSC6v2XMHOnUm8Ule5x6c1w+q0XlBhs6sTj:lMQvg8ap18U6MQY
- TLSH T172E62817FAB211E5C8BAC13886627237BD71BC5647349BD39644A6260F33BF0AA3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_a07e4a43795ff2797ff1b0b3f265e6d8_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_a07e4a43795ff2797ff1b0b3f265e6d8_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_a07e4a43795ff2797ff1b0b3f265e6d8_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.3MB
- SHA256 8f7b6ec385544cabea5c4f79d41d4db33961953126c478cf947c50fe4c70ca62
- MD5 a07e4a43795ff2797ff1b0b3f265e6d8
- SHA1 9745fb999585388ea201f179cde83214257bcb8f
- SHA512 a3b5f7e8c58c6cc72444a0a88c7ebae98dcc7d7003243b6b573bcada872c3b64022b082d7cbcddc2bf87777b76aa1bc896b001b2267887c9b7b6a5a4d2b5aabc
- SSDEEP 98304:+e5x6c1w+q0XlBhs6sTIg/EdezSC6v2XMHOnUm8Ule5x6c1w+q0XlBhs6sTj:lMQvg8ap18U6MQY
- TLSH T172E62817FAB211E5C8BAC13886627237BD71BC5647349BD39644A6260F33BF0AA3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry