General
- Target 2026-08-05_981dcd87d97a448ad813476752ebead0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 7.2MB
- Sample260805-whltyasflc
- SHA256 c2f6940a8faaad63a22736a8706f2b68878ff4e4801fd2f1a9fb48d1c9ce4198
- MD5 981dcd87d97a448ad813476752ebead0
- SHA1 f32ea9f618605cb84c1d79f28656568b469b10a8
- SHA512 5df4f7d23d42efebfb767e3806bf1786728aef9058396f14f91844aa8e17e73a3940a71c1db872ba61923a5a147454890be66bfda5cfe3700257c96b03ede5e5
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1MiG0oAaldmdmnpB:IkQkoirKmd0f
- TLSH T163768D03B69540F5D6698430CD5AA636EB32BC4907F197DB6350FAD92E336C07E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_981dcd87d97a448ad813476752ebead0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_981dcd87d97a448ad813476752ebead0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_981dcd87d97a448ad813476752ebead0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 7.2MB
- SHA256 c2f6940a8faaad63a22736a8706f2b68878ff4e4801fd2f1a9fb48d1c9ce4198
- MD5 981dcd87d97a448ad813476752ebead0
- SHA1 f32ea9f618605cb84c1d79f28656568b469b10a8
- SHA512 5df4f7d23d42efebfb767e3806bf1786728aef9058396f14f91844aa8e17e73a3940a71c1db872ba61923a5a147454890be66bfda5cfe3700257c96b03ede5e5
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1MiG0oAaldmdmnpB:IkQkoirKmd0f
- TLSH T163768D03B69540F5D6698430CD5AA636EB32BC4907F197DB6350FAD92E336C07E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry