General
- Target 2026-08-03_1436be0fb64a65f0a7e6144e5dda6301_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 19.1MB
- Sample260804-dymr3afl8y
- SHA256 7f3f2c456ad4b50cc0298410a21fef2edf3d10ddefb315f5199fabb6f6fef288
- MD5 1436be0fb64a65f0a7e6144e5dda6301
- SHA1 c340101d3a5630fd1973955b6758f77c9aa61b7a
- SHA512 a791ca43cef902865dadd30d8f82d7f9e788b24f839855ec9b3983f7a92c11e9e5047864b216e9c2595c983660bab86bd2f328a6fae9e111e46f2923bd1de1af
- SSDEEP 196608:JtcIkGnfGn918U+tcIkGnfGn918Ut2Vh:I5GfGfT5GfGfJe
- TLSH T1F1177C16B6A480E4C1AAC174CB568622F3B17C154BB197EF5251B6CE2E33AD07F3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_1436be0fb64a65f0a7e6144e5dda6301_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_1436be0fb64a65f0a7e6144e5dda6301_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_1436be0fb64a65f0a7e6144e5dda6301_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 19.1MB
- SHA256 7f3f2c456ad4b50cc0298410a21fef2edf3d10ddefb315f5199fabb6f6fef288
- MD5 1436be0fb64a65f0a7e6144e5dda6301
- SHA1 c340101d3a5630fd1973955b6758f77c9aa61b7a
- SHA512 a791ca43cef902865dadd30d8f82d7f9e788b24f839855ec9b3983f7a92c11e9e5047864b216e9c2595c983660bab86bd2f328a6fae9e111e46f2923bd1de1af
- SSDEEP 196608:JtcIkGnfGn918U+tcIkGnfGn918Ut2Vh:I5GfGfT5GfGfJe
- TLSH T1F1177C16B6A480E4C1AAC174CB568622F3B17C154BB197EF5251B6CE2E33AD07F3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application