General
- Target 2026-08-04_72e709deea2d309011fd21bc8814f32e_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_smoke-loader_vidar
- Size 9.1MB
- Sample260804-hlkt6aytas
- SHA256 b1eefc56e8b3cbd5bc91e4cef963a1eb925c14fe16f016c6d878932e0fed077c
- MD5 72e709deea2d309011fd21bc8814f32e
- SHA1 c0fd10dad3f99336c175213abe40f0469aa4fb42
- SHA512 81e9baab57a61a4af79296182ad8c4b2cb7ae80bbe035579fb854f87527e6779da1cbecb3b8f3335916bcf30adeae42910e513a381c8f2dd3e2492f70eae54fb
- SSDEEP 98304:njBxcO4EY0f2xZPzNsGb6dTb1lf2xZPzNsGb6dTb1lf2xZPzNsGb6dTG:njBxcO4bZPzmG+iZPzmG+iZPzmGj
- TLSH T1A6A68C22F69250F1C46751B0167A7672D7B5BD200B2AB6CF6288DA792E30BC1DF35B43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_72e709deea2d309011fd21bc8814f32e_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_72e709deea2d309011fd21bc8814f32e_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_72e709deea2d309011fd21bc8814f32e_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_smoke-loader_vidar
- Size 9.1MB
- SHA256 b1eefc56e8b3cbd5bc91e4cef963a1eb925c14fe16f016c6d878932e0fed077c
- MD5 72e709deea2d309011fd21bc8814f32e
- SHA1 c0fd10dad3f99336c175213abe40f0469aa4fb42
- SHA512 81e9baab57a61a4af79296182ad8c4b2cb7ae80bbe035579fb854f87527e6779da1cbecb3b8f3335916bcf30adeae42910e513a381c8f2dd3e2492f70eae54fb
- SSDEEP 98304:njBxcO4EY0f2xZPzNsGb6dTb1lf2xZPzNsGb6dTb1lf2xZPzNsGb6dTG:njBxcO4bZPzmG+iZPzmG+iZPzmGj
- TLSH T1A6A68C22F69250F1C46751B0167A7672D7B5BD200B2AB6CF6288DA792E30BC1DF35B43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory