General
- Target 2026-08-06_f891150f01ce47b2cc7d2a732213a269_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 66.5MB
- Sample260806-xp5fasssfx
- SHA256 c4ed5cacb11b4fd70bc7f6f2c67bb2db504b542c9b61164df5620fb9448dd1d0
- MD5 f891150f01ce47b2cc7d2a732213a269
- SHA1 37be45ef970fbb391e4ef5863495cf587fa6b90e
- SHA512 f016741242ad241eb9c53eb2181f311511e98680ac7a57d955735f2c9b9a3b05afd85e5e84f9d4cfd7402852c3d9e7beb8b1036db8038f7a83694c1072a428c7
- SSDEEP 1572864:tAy1fjbAy1fjSAy1fjbAy1fj1Ay1fjbAy1fjC:tAyR3AyR2AyR3AyRxAyR3AyR2
- TLSH T125E78C13F6E940E8E06ED5748B669332EA72BC525B31A6CF0350B7192E73AD05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_f891150f01ce47b2cc7d2a732213a269_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_f891150f01ce47b2cc7d2a732213a269_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_f891150f01ce47b2cc7d2a732213a269_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 66.5MB
- SHA256 c4ed5cacb11b4fd70bc7f6f2c67bb2db504b542c9b61164df5620fb9448dd1d0
- MD5 f891150f01ce47b2cc7d2a732213a269
- SHA1 37be45ef970fbb391e4ef5863495cf587fa6b90e
- SHA512 f016741242ad241eb9c53eb2181f311511e98680ac7a57d955735f2c9b9a3b05afd85e5e84f9d4cfd7402852c3d9e7beb8b1036db8038f7a83694c1072a428c7
- SSDEEP 1572864:tAy1fjbAy1fjSAy1fjbAy1fj1Ay1fjbAy1fjC:tAyR3AyR2AyR3AyRxAyR3AyR2
- TLSH T125E78C13F6E940E8E06ED5748B669332EA72BC525B31A6CF0350B7192E73AD05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry