General
- Target 2026-08-03_4ffacc2252d335b30d0e5db620d5277c_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 51.6MB
- Sample260804-n6xmcadr6w
- SHA256 b09d0c5fece71e67fc838807493dd52a55df865e8e08f288b26b677a6a234b06
- MD5 4ffacc2252d335b30d0e5db620d5277c
- SHA1 555b1a4d0f814abea92ee27a866ae57eb34995e2
- SHA512 eb872c1aebbe30e73cdd942e87d9812e8a41dec08ec843427a52df1a9327c6dd579554e05a769e81230914f2899ef56f4d988d7d1145e8024db3585a3c29ceeb
- SSDEEP 393216:2cD2cDIEU8IBJtWqQjpmcD2cDIEU8IBJtWqQjp6WqQjpmcD2cDIEU8IBJtWqQj9:tZMz4fjp9ZMz4fjpFfjp9ZMz4fj9
- TLSH T1FBC79D17F6A840E8E0AAD57486669332EA72BC561B3197CF0354F7291F33AD05F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_4ffacc2252d335b30d0e5db620d5277c_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_4ffacc2252d335b30d0e5db620d5277c_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_4ffacc2252d335b30d0e5db620d5277c_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 51.6MB
- SHA256 b09d0c5fece71e67fc838807493dd52a55df865e8e08f288b26b677a6a234b06
- MD5 4ffacc2252d335b30d0e5db620d5277c
- SHA1 555b1a4d0f814abea92ee27a866ae57eb34995e2
- SHA512 eb872c1aebbe30e73cdd942e87d9812e8a41dec08ec843427a52df1a9327c6dd579554e05a769e81230914f2899ef56f4d988d7d1145e8024db3585a3c29ceeb
- SSDEEP 393216:2cD2cDIEU8IBJtWqQjpmcD2cDIEU8IBJtWqQjp6WqQjpmcD2cDIEU8IBJtWqQj9:tZMz4fjp9ZMz4fjpFfjp9ZMz4fj9
- TLSH T1FBC79D17F6A840E8E0AAD57486669332EA72BC561B3197CF0354F7291F33AD05F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry