General
- Target 2026-08-04_9fe73cfb8466b6280337ba6bb8738203_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 31.9MB
- Sample260804-2gj7lsztat
- SHA256 d1e9cf2b3fbdeaa1c30971f2d598bc40a1257ff137b284096dabb0299334fb3d
- MD5 9fe73cfb8466b6280337ba6bb8738203
- SHA1 fe6b612ce087d68d952e7cf762c4c8946bfff1ee
- SHA512 919e04dda8ccae9a3c3ae622bc37d422d6fc22f7f4a4a8a0f3a4b298c6e0b4c2c18ccf890ddcc6e6d1af375300a361179c6c1e9f252452caae4ecb872fc50d28
- SSDEEP 196608:JtcITtcIIO6cIxUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:IBhCaUEtQevvqc2W1cpV2XI32i
- TLSH T124774A51B6E443E2D3AA9434CAB18272E7B17C1E5FB1937B5139F29E1F335903D29222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_9fe73cfb8466b6280337ba6bb8738203_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_9fe73cfb8466b6280337ba6bb8738203_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_9fe73cfb8466b6280337ba6bb8738203_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 31.9MB
- SHA256 d1e9cf2b3fbdeaa1c30971f2d598bc40a1257ff137b284096dabb0299334fb3d
- MD5 9fe73cfb8466b6280337ba6bb8738203
- SHA1 fe6b612ce087d68d952e7cf762c4c8946bfff1ee
- SHA512 919e04dda8ccae9a3c3ae622bc37d422d6fc22f7f4a4a8a0f3a4b298c6e0b4c2c18ccf890ddcc6e6d1af375300a361179c6c1e9f252452caae4ecb872fc50d28
- SSDEEP 196608:JtcITtcIIO6cIxUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:IBhCaUEtQevvqc2W1cpV2XI32i
- TLSH T124774A51B6E443E2D3AA9434CAB18272E7B17C1E5FB1937B5139F29E1F335903D29222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application