General
- Target 2026-08-05_ed41a8fc5bae1ee0b9325f63d27f7375_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 34.7MB
- Sample260805-c7m9hswfrd
- SHA256 9dcd7c3bb47e06f39828bf2bc0796601af8aa8f8753a0ed6b0b1dbb4384bae27
- MD5 ed41a8fc5bae1ee0b9325f63d27f7375
- SHA1 6b4b5a48280b3b455075d008c2604001eedbb619
- SHA512 042f07a806e3d320681f8cfa1ad0b8fb1cebc2c47a6ea448dadcbfc4025419c44001ab40660d9e9ef6dd502234f2a8cfe51b14b4c788f11bfe6af942207579ea
- SSDEEP 196608:JtcIkGnk2VhptcIkGnk2VhioK3odStcIkGnk2VhptcIkGnk2VhioK3odHD:I5Gkea5GkeMoxR5Gkea5GkeMoxdD
- TLSH T138877B17B2A440E4C09AC174CB468632E7B17C594BF1A7EF6251B6D92F33AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_ed41a8fc5bae1ee0b9325f63d27f7375_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_ed41a8fc5bae1ee0b9325f63d27f7375_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_ed41a8fc5bae1ee0b9325f63d27f7375_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 34.7MB
- SHA256 9dcd7c3bb47e06f39828bf2bc0796601af8aa8f8753a0ed6b0b1dbb4384bae27
- MD5 ed41a8fc5bae1ee0b9325f63d27f7375
- SHA1 6b4b5a48280b3b455075d008c2604001eedbb619
- SHA512 042f07a806e3d320681f8cfa1ad0b8fb1cebc2c47a6ea448dadcbfc4025419c44001ab40660d9e9ef6dd502234f2a8cfe51b14b4c788f11bfe6af942207579ea
- SSDEEP 196608:JtcIkGnk2VhptcIkGnk2VhioK3odStcIkGnk2VhptcIkGnk2VhioK3odHD:I5Gkea5GkeMoxR5Gkea5GkeMoxdD
- TLSH T138877B17B2A440E4C09AC174CB468632E7B17C594BF1A7EF6251B6D92F33AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application