General
- Target 2026-08-05_22a7770af241dfd135fcb9d2829241f9_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 38.5MB
- Sample260805-dswssaal41
- SHA256 2c05412658e9b022e9019ae450469bca87a23686c0a24e4c7e0dd72734a1d7d2
- MD5 22a7770af241dfd135fcb9d2829241f9
- SHA1 771f525c6ed5090963a09b5fbbe7822520dbed8e
- SHA512 4ab37e534dcb0f45ea8b8a6a523fce52c6547047548b4468179ea67670276767bf82579d87bd313f24ed6b40907430ba58517a1d3f04962964338cdb2c4a5154
- SSDEEP 393216:I5G+ob5G+oKvyEYKb75G+ob5G+oKvyEYKbXWqQjp3:I47b47+147b47+Yfjp3
- TLSH T193975B16B6E440E4D0AAC134CB668632E7B27C154FB097EF5251B69E2F33AD07E39712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_22a7770af241dfd135fcb9d2829241f9_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_22a7770af241dfd135fcb9d2829241f9_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_22a7770af241dfd135fcb9d2829241f9_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 38.5MB
- SHA256 2c05412658e9b022e9019ae450469bca87a23686c0a24e4c7e0dd72734a1d7d2
- MD5 22a7770af241dfd135fcb9d2829241f9
- SHA1 771f525c6ed5090963a09b5fbbe7822520dbed8e
- SHA512 4ab37e534dcb0f45ea8b8a6a523fce52c6547047548b4468179ea67670276767bf82579d87bd313f24ed6b40907430ba58517a1d3f04962964338cdb2c4a5154
- SSDEEP 393216:I5G+ob5G+oKvyEYKb75G+ob5G+oKvyEYKbXWqQjp3:I47b47+147b47+Yfjp3
- TLSH T193975B16B6E440E4D0AAC134CB668632E7B27C154FB097EF5251B69E2F33AD07E39712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application