General
- Target 2026-08-04_5cf607f51fff901c88b21f4ceae5b491_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 18.7MB
- Sample260804-ytmlqaxsh1
- SHA256 a50e28d2cc920ce5ed5c4dc0108d4b1718b1c17d5a7e2569395ee87639fbbddc
- MD5 5cf607f51fff901c88b21f4ceae5b491
- SHA1 bc69c6eb735c8d3414544cbe262b8b14b5351a17
- SHA512 5ccb8dc60ef84ce8e5991d40977e1871d93a6d36ca5733513d3a0f913856d458de955b420a4b307a6a3e48e7a03c9175b7a6149b0b6d86e68060e96bd60b3e97
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+2AWyZ/K0ttYVAATdKvyEYc/b3w8O:2cD2cDxyZ/K0ttYZTkvyEYKbi
- TLSH T113177C12F6E840F5E1BAD534CA768632EB727C160B7196CF1250F6592F336D0AE39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_5cf607f51fff901c88b21f4ceae5b491_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_5cf607f51fff901c88b21f4ceae5b491_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_5cf607f51fff901c88b21f4ceae5b491_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 18.7MB
- SHA256 a50e28d2cc920ce5ed5c4dc0108d4b1718b1c17d5a7e2569395ee87639fbbddc
- MD5 5cf607f51fff901c88b21f4ceae5b491
- SHA1 bc69c6eb735c8d3414544cbe262b8b14b5351a17
- SHA512 5ccb8dc60ef84ce8e5991d40977e1871d93a6d36ca5733513d3a0f913856d458de955b420a4b307a6a3e48e7a03c9175b7a6149b0b6d86e68060e96bd60b3e97
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+2AWyZ/K0ttYVAATdKvyEYc/b3w8O:2cD2cDxyZ/K0ttYZTkvyEYKbi
- TLSH T113177C12F6E840F5E1BAD534CA768632EB727C160B7196CF1250F6592F336D0AE39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry