General
- Target 2026-08-03_7474b4569325ec3b07b3259a1eb15fda_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 46.2MB
- Sample260804-nfzc9aydrf
- SHA256 2e38ce20de0638d237100be74de9d5485c6ee3ebbf1033fb42176bc61baadfec
- MD5 7474b4569325ec3b07b3259a1eb15fda
- SHA1 41b741a4e68eb5534192b0d2412f9fb45aa57757
- SHA512 37a95c8aedd204146b563833f89228d778fd73a1f73527c0f2d2ccf201e40607bc7f8d1f4f0ea41280b0b816e22e02d22477d491ac65ba69f5ddd62430b9981a
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+/8Vb618U68Vbb8Vb618U68VbCc0:2cD2cDScD2cDoKDcD2cDScD2cDoKFj
- TLSH T17EB78C12F6E440B5E1BA99708AA69636EA727C520B30C7CF4354F61D1F336D0AE36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_7474b4569325ec3b07b3259a1eb15fda_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_7474b4569325ec3b07b3259a1eb15fda_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_7474b4569325ec3b07b3259a1eb15fda_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 46.2MB
- SHA256 2e38ce20de0638d237100be74de9d5485c6ee3ebbf1033fb42176bc61baadfec
- MD5 7474b4569325ec3b07b3259a1eb15fda
- SHA1 41b741a4e68eb5534192b0d2412f9fb45aa57757
- SHA512 37a95c8aedd204146b563833f89228d778fd73a1f73527c0f2d2ccf201e40607bc7f8d1f4f0ea41280b0b816e22e02d22477d491ac65ba69f5ddd62430b9981a
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+T/h1+/8Vb618U68Vbb8Vb618U68VbCc0:2cD2cDScD2cDoKDcD2cDScD2cDoKFj
- TLSH T17EB78C12F6E440B5E1BA99708AA69636EA727C520B30C7CF4354F61D1F336D0AE36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application