General
- Target 2026-08-04_a20629aef8af85f0547e71b5bc2ce994_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 10.5MB
- Sample260804-xm1dkav1cw
- SHA256 9406a67abbcc6da9d2af26fc09510ed5846f2dc352811b4ffc7c56a0545009b0
- MD5 a20629aef8af85f0547e71b5bc2ce994
- SHA1 c8729fdc35f827735325ff18bc1b37a5f2433040
- SHA512 5220e9c21292966ebb5667d4cd6ad77a9c8f086c7b2325aba29f8a2a198eb0d7343a52784bd24813bc1710f0d3a9ef8b73bb8c795094629b41d72e0d2a1425e9
- SSDEEP 98304:Su5x6M1pLapIAu5x6M1pLapIIoqTezSC6v2XMHtLapIFoq2Vjnm:JtcITtcIIO6cIFGn
- TLSH T12EB64B26B1F141A5C199C075CF468636E3F13C698FF087EBA145B2D92F33AD07A3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_a20629aef8af85f0547e71b5bc2ce994_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_a20629aef8af85f0547e71b5bc2ce994_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_a20629aef8af85f0547e71b5bc2ce994_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 10.5MB
- SHA256 9406a67abbcc6da9d2af26fc09510ed5846f2dc352811b4ffc7c56a0545009b0
- MD5 a20629aef8af85f0547e71b5bc2ce994
- SHA1 c8729fdc35f827735325ff18bc1b37a5f2433040
- SHA512 5220e9c21292966ebb5667d4cd6ad77a9c8f086c7b2325aba29f8a2a198eb0d7343a52784bd24813bc1710f0d3a9ef8b73bb8c795094629b41d72e0d2a1425e9
- SSDEEP 98304:Su5x6M1pLapIAu5x6M1pLapIIoqTezSC6v2XMHtLapIFoq2Vjnm:JtcITtcIIO6cIFGn
- TLSH T12EB64B26B1F141A5C199C075CF468636E3F13C698FF087EBA145B2D92F33AD07A3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry