General
- Target 2026-08-03_38894a8412587e59a84300cc19ff812f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 15.6MB
- Sample260804-pl3taszgnb
- SHA256 e56441c239de35717ecfcfd10edcabf5a56c6b6819756de1d0391d84720049fa
- MD5 38894a8412587e59a84300cc19ff812f
- SHA1 e85972a5134d1f763cd10cb4a61d1a4cb767ef99
- SHA512 20ec63ca2c668f445c3083579557c80973b13129325a542f5f21635b7c0ebe559f14d1ee02a433a4b36448b6b373afdab1f558bd752849ce805d95214ca311c2
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+ReWyZ/K0ttYVAATEoVvyEYc/b3w8O:YZyZ/K0ttYZT7VvyEYKbi
- TLSH T18DF67C12F6A481F5E076D074C9A69776EB327C424B709ACB1241E7AD2F336D0AE39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_38894a8412587e59a84300cc19ff812f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_38894a8412587e59a84300cc19ff812f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_38894a8412587e59a84300cc19ff812f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 15.6MB
- SHA256 e56441c239de35717ecfcfd10edcabf5a56c6b6819756de1d0391d84720049fa
- MD5 38894a8412587e59a84300cc19ff812f
- SHA1 e85972a5134d1f763cd10cb4a61d1a4cb767ef99
- SHA512 20ec63ca2c668f445c3083579557c80973b13129325a542f5f21635b7c0ebe559f14d1ee02a433a4b36448b6b373afdab1f558bd752849ce805d95214ca311c2
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+ReWyZ/K0ttYVAATEoVvyEYc/b3w8O:YZyZ/K0ttYZT7VvyEYKbi
- TLSH T18DF67C12F6A481F5E076D074C9A69776EB327C424B709ACB1241E7AD2F336D0AE39731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry