General
- Target 2026-08-07_087e57edb9c7cdcdd84048facb173d15_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 11.5MB
- Sample260807-qfls9sem71
- SHA256 94b6549ffae57bb6fae539c2204bc664f53b2f73de1a2d213ccdff1fc56977f6
- MD5 087e57edb9c7cdcdd84048facb173d15
- SHA1 72f21696d007689c5d577f6e091e648be0834dba
- SHA512 42095997bf7a995be3da6c370db7cc41084718c645ef511b7472d5363a64999667a417b815a3aede60747ce9cb44ecb65641334559d4eb50d4595a1fb68caec3
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb6nUm8USnUm8UGq9ceq9+2xl/SSay2:l8Vb618U68Vb618US18UGWqQI0py2
- TLSH T198C68C13F6A940E9E06ED5748B668332EB72BC525B31A6CF0250B7191F73AD05F39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_087e57edb9c7cdcdd84048facb173d15_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_087e57edb9c7cdcdd84048facb173d15_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_087e57edb9c7cdcdd84048facb173d15_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 11.5MB
- SHA256 94b6549ffae57bb6fae539c2204bc664f53b2f73de1a2d213ccdff1fc56977f6
- MD5 087e57edb9c7cdcdd84048facb173d15
- SHA1 72f21696d007689c5d577f6e091e648be0834dba
- SHA512 42095997bf7a995be3da6c370db7cc41084718c645ef511b7472d5363a64999667a417b815a3aede60747ce9cb44ecb65641334559d4eb50d4595a1fb68caec3
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb6nUm8USnUm8UGq9ceq9+2xl/SSay2:l8Vb618U68Vb618US18UGWqQI0py2
- TLSH T198C68C13F6A940E9E06ED5748B668332EB72BC525B31A6CF0250B7191F73AD05F39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry