General
- Target 2026-08-05_cc3d04b2d32aed6ff4927e7453c0ae01_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar_wannacry
- Size 5.3MB
- Sample260805-v187hscg86
- SHA256 3ebcb8e45c19f0043fa6649f2e0fe2829d286205a6689ece5068f08aff2602f9
- MD5 cc3d04b2d32aed6ff4927e7453c0ae01
- SHA1 385cd7c331868acaad7a17aadeb12752fe141ba8
- SHA512 2d74e9a534accca49056efb45194710fa8f06afdbb9e6be48b1b5fcfe160c636eabd661af8c2ec9a3253316f6f0cb64fdd90e01f44e612c6e1f404e51d43bee4
- SSDEEP 98304:Uu5x6M1wu5x6M1IezSC6v2XMHcu5x6M1wu5x6M1IezSC6v2XMH:nPDyPD
- TLSH T1C8466C16F5B482B3C5B69475C5DAB77AFA3275420B208BC78345CB2C2E232D19D3673A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_cc3d04b2d32aed6ff4927e7453c0ae01_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_cc3d04b2d32aed6ff4927e7453c0ae01_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_cc3d04b2d32aed6ff4927e7453c0ae01_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar_wannacry
- Size 5.3MB
- SHA256 3ebcb8e45c19f0043fa6649f2e0fe2829d286205a6689ece5068f08aff2602f9
- MD5 cc3d04b2d32aed6ff4927e7453c0ae01
- SHA1 385cd7c331868acaad7a17aadeb12752fe141ba8
- SHA512 2d74e9a534accca49056efb45194710fa8f06afdbb9e6be48b1b5fcfe160c636eabd661af8c2ec9a3253316f6f0cb64fdd90e01f44e612c6e1f404e51d43bee4
- SSDEEP 98304:Uu5x6M1wu5x6M1IezSC6v2XMHcu5x6M1wu5x6M1IezSC6v2XMH:nPDyPD
- TLSH T1C8466C16F5B482B3C5B69475C5DAB77AFA3275420B208BC78345CB2C2E232D19D3673A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry