General
- Target 2026-08-05_4eddf347111b78d8a22574e8e1d40c70_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.7MB
- Sample260805-m98ncawdmg
- SHA256 e1ef8195a37f1a2ce3fb3cb71219cec9f680b64988e22e95e5df1e00f5fb91cb
- MD5 4eddf347111b78d8a22574e8e1d40c70
- SHA1 babbb37832976f1516c7814aad288d1179aa6033
- SHA512 36f2e174f9b56ed914233f1a07038d868fafcd1def138b969a095b432ece21ab5ea075995f2ca8949506560cbc1d20c962ec42405d5c4bd7b953b72d487cc456
- SSDEEP 49152:jj9LxcO4Q5YtNPFqKzT2bo4+JZmxSftT0MjL/gxkOjc9210SqatglfgjI45TMwwO:jjBxcO4EYt1fVIxQeMjLsAA5mLapIy
- TLSH T10A366B12F2920076C9992079CF5A973147A07D784FF2C3EBB64472D96BF26C07A3635A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-05_4eddf347111b78d8a22574e8e1d40c70_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_4eddf347111b78d8a22574e8e1d40c70_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_4eddf347111b78d8a22574e8e1d40c70_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.7MB
- SHA256 e1ef8195a37f1a2ce3fb3cb71219cec9f680b64988e22e95e5df1e00f5fb91cb
- MD5 4eddf347111b78d8a22574e8e1d40c70
- SHA1 babbb37832976f1516c7814aad288d1179aa6033
- SHA512 36f2e174f9b56ed914233f1a07038d868fafcd1def138b969a095b432ece21ab5ea075995f2ca8949506560cbc1d20c962ec42405d5c4bd7b953b72d487cc456
- SSDEEP 49152:jj9LxcO4Q5YtNPFqKzT2bo4+JZmxSftT0MjL/gxkOjc9210SqatglfgjI45TMwwO:jjBxcO4EYt1fVIxQeMjLsAA5mLapIy
- TLSH T10A366B12F2920076C9992079CF5A973147A07D784FF2C3EBB64472D96BF26C07A3635A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory