General
- Target 2026-08-03_5db66a15bcd8ade9b3c52b331945e080_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 11.4MB
- Sample260804-nw2hjsvxgs
- SHA256 41dd0de4f4417eeea69eaeef839627d5146f402d8d234b9e3a83bb8d9ff9a803
- MD5 5db66a15bcd8ade9b3c52b331945e080
- SHA1 13a44c89ccebfefd2f80b2d4383b0995e9dc5759
- SHA512 f7b8345ece023393493164fbb8c8fd148813678c0ba446c36e44fab90e2490aa2a35abcc692550bef9eec3ae3b346125796c50680184f395d984417232ead91b
- SSDEEP 98304:Su5x6M1pLapIAu5x6M1pLapIIoqTezSC6v2XMHSWQtZ/K0tGOFWVRuLftCTY:JtcITtcIIONWyZ/K0ttYVAATY
- TLSH T115C66B13B1E100A9D1AAD074CF669731E7B27C598BF096EB7140B2D92F33AD07A39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_5db66a15bcd8ade9b3c52b331945e080_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_5db66a15bcd8ade9b3c52b331945e080_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_5db66a15bcd8ade9b3c52b331945e080_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 11.4MB
- SHA256 41dd0de4f4417eeea69eaeef839627d5146f402d8d234b9e3a83bb8d9ff9a803
- MD5 5db66a15bcd8ade9b3c52b331945e080
- SHA1 13a44c89ccebfefd2f80b2d4383b0995e9dc5759
- SHA512 f7b8345ece023393493164fbb8c8fd148813678c0ba446c36e44fab90e2490aa2a35abcc692550bef9eec3ae3b346125796c50680184f395d984417232ead91b
- SSDEEP 98304:Su5x6M1pLapIAu5x6M1pLapIIoqTezSC6v2XMHSWQtZ/K0tGOFWVRuLftCTY:JtcITtcIIONWyZ/K0ttYVAATY
- TLSH T115C66B13B1E100A9D1AAD074CF669731E7B27C598BF096EB7140B2D92F33AD07A39716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry