General
- Target 2026-08-06_2bbc0505d5c1afc93f03c0d2f2719a8d_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_smoke-loader_vidar
- Size 11.1MB
- Sample260806-htye8azzcw
- SHA256 b9fb52ee591b2ff36c8fdda1acc63be1d4c49f345162d4b407d44975e48deb61
- MD5 2bbc0505d5c1afc93f03c0d2f2719a8d
- SHA1 52768788723d89bf9b643441ca40ebcc6c916a31
- SHA512 677d0321b0467e8747eee8d48a9bfab822a268e8f9eb8740f20ec498f776bd2944de77cff68938e4b5f7f9bcc4145dbe63a0684db1d0d39332281b37fbbceb33
- SSDEEP 196608:njBxcO4bZPzmGfJqiZPzmGfJqiZPzmGfJqiZPzmGfJjo1:XBGfJqNGfJqNGfJqNGfJM1
- TLSH T1D5C6AE32F2D244B4D4B321B056BA7675D775BD200B2AA6CF6288CA791E34BD1CB35B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_2bbc0505d5c1afc93f03c0d2f2719a8d_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_2bbc0505d5c1afc93f03c0d2f2719a8d_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_2bbc0505d5c1afc93f03c0d2f2719a8d_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_smoke-loader_vidar
- Size 11.1MB
- SHA256 b9fb52ee591b2ff36c8fdda1acc63be1d4c49f345162d4b407d44975e48deb61
- MD5 2bbc0505d5c1afc93f03c0d2f2719a8d
- SHA1 52768788723d89bf9b643441ca40ebcc6c916a31
- SHA512 677d0321b0467e8747eee8d48a9bfab822a268e8f9eb8740f20ec498f776bd2944de77cff68938e4b5f7f9bcc4145dbe63a0684db1d0d39332281b37fbbceb33
- SSDEEP 196608:njBxcO4bZPzmGfJqiZPzmGfJqiZPzmGfJqiZPzmGfJjo1:XBGfJqNGfJqNGfJqNGfJM1
- TLSH T1D5C6AE32F2D244B4D4B321B056BA7675D775BD200B2AA6CF6288CA791E34BD1CB35B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory