General
- Target 2026-08-03_7b11d166591658fbbaa3422db43a0ced_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 18.0MB
- Sample260804-na2anaydke
- SHA256 863dfaabf6b19c3587c58e1099d3a270b6dc081f9e2887e5fa6f73442c7d483f
- MD5 7b11d166591658fbbaa3422db43a0ced
- SHA1 6c5d1e3babc814804e108ba6bf6e7d5d79e43035
- SHA512 f60abeaf55ed1a55122abc385934ffb39d1f080787ec1739b33dfc8520353f41903ebc16d5162bc3b86d1a7535e432cb291f66904986276e4403bdc8af565a4b
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmUoq2VjnmSnUm8UZu5x6M1pLapIkoq2VjnmUoq2VjnmS1:JtcIkGnfGn918U+tcIkGnfGn918UhoK
- TLSH T1E4176C1676A481E4C1AAC274CF568622F3B17C154FB097EF5255B2CE2E33AD07E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_7b11d166591658fbbaa3422db43a0ced_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_7b11d166591658fbbaa3422db43a0ced_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_7b11d166591658fbbaa3422db43a0ced_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 18.0MB
- SHA256 863dfaabf6b19c3587c58e1099d3a270b6dc081f9e2887e5fa6f73442c7d483f
- MD5 7b11d166591658fbbaa3422db43a0ced
- SHA1 6c5d1e3babc814804e108ba6bf6e7d5d79e43035
- SHA512 f60abeaf55ed1a55122abc385934ffb39d1f080787ec1739b33dfc8520353f41903ebc16d5162bc3b86d1a7535e432cb291f66904986276e4403bdc8af565a4b
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmUoq2VjnmSnUm8UZu5x6M1pLapIkoq2VjnmUoq2VjnmS1:JtcIkGnfGn918U+tcIkGnfGn918UhoK
- TLSH T1E4176C1676A481E4C1AAC274CF568622F3B17C154FB097EF5255B2CE2E33AD07E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry