General
- Target 2026-08-03_641d2da5c3300c02631458fe76f87c34_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 35.0MB
- Sample260804-nrc96adp2y
- SHA256 a70ff141aee0575f5b0a242b0a6a5940bb000e26275173801c9eab6dd80d13f2
- MD5 641d2da5c3300c02631458fe76f87c34
- SHA1 5573a3291462b747d1ad38c453a6d24a344d3311
- SHA512 f242746536d1f8f2a9e95baab92ec237e8ed26f3cefabcb296b6142be4756437d116bee2dd1926209d00f39271025a981d73f865257a78e61c5f9133cbafc3b8
- SSDEEP 393216:YZyZ/K0ttYZT7QUEtQevvqc2W1cpV2XI32i:+yZ/K0ttYZT7rE8c23pV2X+T
- TLSH T172875B92B6E443E2E3A6D534C9B182B6EB717C0E1F3196BB1139F21E1E376D05D29321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_641d2da5c3300c02631458fe76f87c34_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_641d2da5c3300c02631458fe76f87c34_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_641d2da5c3300c02631458fe76f87c34_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 35.0MB
- SHA256 a70ff141aee0575f5b0a242b0a6a5940bb000e26275173801c9eab6dd80d13f2
- MD5 641d2da5c3300c02631458fe76f87c34
- SHA1 5573a3291462b747d1ad38c453a6d24a344d3311
- SHA512 f242746536d1f8f2a9e95baab92ec237e8ed26f3cefabcb296b6142be4756437d116bee2dd1926209d00f39271025a981d73f865257a78e61c5f9133cbafc3b8
- SSDEEP 393216:YZyZ/K0ttYZT7QUEtQevvqc2W1cpV2XI32i:+yZ/K0ttYZT7rE8c23pV2X+T
- TLSH T172875B92B6E443E2E3A6D534C9B182B6EB717C0E1F3196BB1139F21E1E376D05D29321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application