General
- Target 2026-08-06_82ccc42522b70f6b7cbada85a7c1050c_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 4.1MB
- Sample260806-ybajfahn61
- SHA256 8998cb9d6c6fc18247d73fd7ba302a55f0b68bd08249628513c30fb416de3142
- MD5 82ccc42522b70f6b7cbada85a7c1050c
- SHA1 2925e315b1d98e4f62277cb2f00304a3c786738e
- SHA512 86079efb0ab449fadaf4ca6444f94468d53fd2cba4dc63bdbcaf68a6ed5878dae3d8a783de3fa07cab746b25e7cd53a03f6852913d4b7fea88d0bae238b49b79
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1Oi/h1+:nPdPyi/h1+
- TLSH T17D169E12F59180F2D676587045AAA776EB32B9020B21CBC7D355DB2C2E332D1AD3773A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_82ccc42522b70f6b7cbada85a7c1050c_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_82ccc42522b70f6b7cbada85a7c1050c_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_82ccc42522b70f6b7cbada85a7c1050c_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 4.1MB
- SHA256 8998cb9d6c6fc18247d73fd7ba302a55f0b68bd08249628513c30fb416de3142
- MD5 82ccc42522b70f6b7cbada85a7c1050c
- SHA1 2925e315b1d98e4f62277cb2f00304a3c786738e
- SHA512 86079efb0ab449fadaf4ca6444f94468d53fd2cba4dc63bdbcaf68a6ed5878dae3d8a783de3fa07cab746b25e7cd53a03f6852913d4b7fea88d0bae238b49b79
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1Oi/h1+:nPdPyi/h1+
- TLSH T17D169E12F59180F2D676587045AAA776EB32B9020B21CBC7D355DB2C2E332D1AD3773A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry