General
- Target 2026-08-04_cd22ab6a97e862852fa7adf178037320_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 8.8MB
- Sample260804-wrky1atze1
- SHA256 795938b1a1d4268143fe486c3bae3bb0184366956f69891cbbc06e59ed2f10cc
- MD5 cd22ab6a97e862852fa7adf178037320
- SHA1 3c20872e41353ecfb0400ec4998c967c526e0bb4
- SHA512 e7be99ea981df16f90d8b0aeafb96f2160df9e8306352484ad55b4adc91e8de12fd006daf50588ebb8caa2e9b36bf7524ddea4894e3c5ee6cbbec93e05ce18fa
- SSDEEP 98304:Su5x6M1pLapIkoq2Vjnm3GgHIKgM6u5x6M1pLapI:JtcIkGn+oKLtcI
- TLSH T1FA966B2271E140E5C199C130CF568732E7E17C698FF197EBA255B2C92F33AD07A3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_cd22ab6a97e862852fa7adf178037320_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_cd22ab6a97e862852fa7adf178037320_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_cd22ab6a97e862852fa7adf178037320_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 8.8MB
- SHA256 795938b1a1d4268143fe486c3bae3bb0184366956f69891cbbc06e59ed2f10cc
- MD5 cd22ab6a97e862852fa7adf178037320
- SHA1 3c20872e41353ecfb0400ec4998c967c526e0bb4
- SHA512 e7be99ea981df16f90d8b0aeafb96f2160df9e8306352484ad55b4adc91e8de12fd006daf50588ebb8caa2e9b36bf7524ddea4894e3c5ee6cbbec93e05ce18fa
- SSDEEP 98304:Su5x6M1pLapIkoq2Vjnm3GgHIKgM6u5x6M1pLapI:JtcIkGn+oKLtcI
- TLSH T1FA966B2271E140E5C199C130CF568732E7E17C698FF197EBA255B2C92F33AD07A3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry