General
- Target 2026-08-03_fea90130182efc0623f3faac57c30619_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 35.7MB
- Sample260804-kn2lsswbrg
- SHA256 988990b36c2243d982127f9f964753804546d35027481a7d6642c1b55139d45c
- MD5 fea90130182efc0623f3faac57c30619
- SHA1 d00b90c60f2738ad130429cb0f5d060afa9f9d33
- SHA512 138f710052a8e2ef4801571ce431bedb5a470b26ed9d902b5b26f37a145323d961716aff15b94105e976556127ff6c91c0dcf087c85087a3750895cf8c5bd974
- SSDEEP 393216:I5G+ob5G+oKvyEYKb75G+ob5G+oKvyEYKbul:I47b47+147b47+Ml
- TLSH T1B9875A16B6A440E4D1AAC134CB668632E7B27C154FF097EB5251F29E2F33AD07E39712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_fea90130182efc0623f3faac57c30619_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_fea90130182efc0623f3faac57c30619_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_fea90130182efc0623f3faac57c30619_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 35.7MB
- SHA256 988990b36c2243d982127f9f964753804546d35027481a7d6642c1b55139d45c
- MD5 fea90130182efc0623f3faac57c30619
- SHA1 d00b90c60f2738ad130429cb0f5d060afa9f9d33
- SHA512 138f710052a8e2ef4801571ce431bedb5a470b26ed9d902b5b26f37a145323d961716aff15b94105e976556127ff6c91c0dcf087c85087a3750895cf8c5bd974
- SSDEEP 393216:I5G+ob5G+oKvyEYKb75G+ob5G+oKvyEYKbul:I47b47+147b47+Ml
- TLSH T1B9875A16B6A440E4D1AAC134CB668632E7B27C154FF097EB5251F29E2F33AD07E39712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application