General
- Target 2026-08-07_bbeb281045afdf72b22d782e80081276_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 39.5MB
- Sample260808-a3333awgjb
- SHA256 a842b8017f1647c661bb816d52e0a09c9a08fa03d317086df4ae2f69400f7f85
- MD5 bbeb281045afdf72b22d782e80081276
- SHA1 eac9fac2caae312dfaf47844a04dc0ced8a00516
- SHA512 e99642bf9aa67511e2656fa2f5e27754a3c9447e539504d964c992231d45aef2ff461b01abe21aaa22a4b031d497524e5971357eff2197256a4aa1442c2aa698
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+/8Vb618U68Vbb8Vb618U68VbCcc6/h1T:2cD2cDBcD2cDGcD2cDBcD2cDa
- TLSH T1AC978C16F6E440F5E1BA99308AA69236EB32BC520B31C7CF5354F6191E336D09E36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_bbeb281045afdf72b22d782e80081276_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_bbeb281045afdf72b22d782e80081276_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_bbeb281045afdf72b22d782e80081276_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 39.5MB
- SHA256 a842b8017f1647c661bb816d52e0a09c9a08fa03d317086df4ae2f69400f7f85
- MD5 bbeb281045afdf72b22d782e80081276
- SHA1 eac9fac2caae312dfaf47844a04dc0ced8a00516
- SHA512 e99642bf9aa67511e2656fa2f5e27754a3c9447e539504d964c992231d45aef2ff461b01abe21aaa22a4b031d497524e5971357eff2197256a4aa1442c2aa698
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+/8Vb618U68Vbb8Vb618U68VbCcc6/h1T:2cD2cDBcD2cDGcD2cDBcD2cDa
- TLSH T1AC978C16F6E440F5E1BA99308AA69236EB32BC520B31C7CF5354F6191E336D09E36736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry