General
- Target 2026-08-05_2296db00cac052753412bbfd142dcc7b_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 54.1MB
- Sample260805-1ggwtastgz
- SHA256 fb919dca9205a48a7db806316710df1a3cdde632255813f5b8e1896bb3960fe3
- MD5 2296db00cac052753412bbfd142dcc7b
- SHA1 4b865e8b2cd28f54c372715ea54cfb68170121fd
- SHA512 daf856584a054b7731dcee169031303f68807e6b9dc231a483d893ab78f09201567de341b31db46d8ad876feeb63a8a33535f9f4e048fcd7c8d0bbb0059c6756
- SSDEEP 393216:2cD2cDIEU8IBJvcD2cDIEU8IBJbKDcD2cDIEU8IBJvcD2cDIEU8IBJbKx:tZMzkZMz+AZMzkZMz+x
- TLSH T1D2C79D16F6E440F5D17A95348AA69232EB72BC520B31C7CF4364F6191F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_2296db00cac052753412bbfd142dcc7b_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_2296db00cac052753412bbfd142dcc7b_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_2296db00cac052753412bbfd142dcc7b_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 54.1MB
- SHA256 fb919dca9205a48a7db806316710df1a3cdde632255813f5b8e1896bb3960fe3
- MD5 2296db00cac052753412bbfd142dcc7b
- SHA1 4b865e8b2cd28f54c372715ea54cfb68170121fd
- SHA512 daf856584a054b7731dcee169031303f68807e6b9dc231a483d893ab78f09201567de341b31db46d8ad876feeb63a8a33535f9f4e048fcd7c8d0bbb0059c6756
- SSDEEP 393216:2cD2cDIEU8IBJvcD2cDIEU8IBJbKDcD2cDIEU8IBJvcD2cDIEU8IBJbKx:tZMzkZMz+AZMzkZMz+x
- TLSH T1D2C79D16F6E440F5D17A95348AA69232EB72BC520B31C7CF4364F6191F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry