General
- Target 2026-08-06_5e8d62948a3891813954bbb6d6d45267_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 2.8MB
- Sample260806-qrmvpswyex
- SHA256 92f7c00c66300a068303f8de636f44eeee71a9a0cda47891d9c3b21da96797a9
- MD5 5e8d62948a3891813954bbb6d6d45267
- SHA1 c7b7a6178b981bd8925477a18d813547b86f5d5b
- SHA512 4607755a6bcef88c541ad4341145f902b3f0f9fb220a3d8089456ddfb60f77c592009a5d1ea346146f75915e381ffa86ce9eb973fdff92248da095de8c95a820
- SSDEEP 49152:jYRw5x6M1uFPji0AjEYRw5x6M1uFPji0AjxJIUq:Uu5x6M1uVjovu5x6M1uVjom
- TLSH T14AD58D16F6A482B2D1768474C5E6A77AEA3275420B30CBC78355CB6C3E236D19E37336
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_5e8d62948a3891813954bbb6d6d45267_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_5e8d62948a3891813954bbb6d6d45267_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_5e8d62948a3891813954bbb6d6d45267_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 2.8MB
- SHA256 92f7c00c66300a068303f8de636f44eeee71a9a0cda47891d9c3b21da96797a9
- MD5 5e8d62948a3891813954bbb6d6d45267
- SHA1 c7b7a6178b981bd8925477a18d813547b86f5d5b
- SHA512 4607755a6bcef88c541ad4341145f902b3f0f9fb220a3d8089456ddfb60f77c592009a5d1ea346146f75915e381ffa86ce9eb973fdff92248da095de8c95a820
- SSDEEP 49152:jYRw5x6M1uFPji0AjEYRw5x6M1uFPji0AjxJIUq:Uu5x6M1uVjovu5x6M1uVjom
- TLSH T14AD58D16F6A482B2D1768474C5E6A77AEA3275420B30CBC78355CB6C3E236D19E37336
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry