General
- Target 2026-08-07_2230009514f600a9c71813ba5cdd85d7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 21.6MB
- Sample260807-fwfxvaxgrd
- SHA256 600c8e1ea9f400af10a1202e6f1e881c4da0bd23d2fad9cad12da129207b9b95
- MD5 2230009514f600a9c71813ba5cdd85d7
- SHA1 4124246489aab428e0728de71f5c1d1a9c92c57f
- SHA512 8dbe51faa1d0816fe20fd41dbcbc3b2ea8eaa841d1624fea292fb0c92a286df4acd4e68609a31841d511f0e620b6df40d2a3c88ad1c0d6e72c55dc52757bd325
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+/8Vb618U68Vbb8Vb618U68VbCcc6/h1H:2cD2cDBcD2cDVK
- TLSH T167378C16F6E440F5E17A99708AA69336EA727C520B30C7CF4354F6191F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_2230009514f600a9c71813ba5cdd85d7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_2230009514f600a9c71813ba5cdd85d7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_2230009514f600a9c71813ba5cdd85d7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 21.6MB
- SHA256 600c8e1ea9f400af10a1202e6f1e881c4da0bd23d2fad9cad12da129207b9b95
- MD5 2230009514f600a9c71813ba5cdd85d7
- SHA1 4124246489aab428e0728de71f5c1d1a9c92c57f
- SHA512 8dbe51faa1d0816fe20fd41dbcbc3b2ea8eaa841d1624fea292fb0c92a286df4acd4e68609a31841d511f0e620b6df40d2a3c88ad1c0d6e72c55dc52757bd325
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+/8Vb618U68Vbb8Vb618U68VbCcc6/h1H:2cD2cDBcD2cDVK
- TLSH T167378C16F6E440F5E17A99708AA69336EA727C520B30C7CF4354F6191F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application