General
- Target 2026-08-07_dc79a3daa069a1c8db06e719dd0581e6_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 24.3MB
- Sample260808-awszhsy1bt
- SHA256 0b65a21234d41795f848fa9fea516f1da6d53f6613390b41cbeabfb32c7ae442
- MD5 dc79a3daa069a1c8db06e719dd0581e6
- SHA1 40c2180da7f82aab215f5a3ac7f275e606ec29b8
- SHA512 ad041b9888eccf6f9f7b0c2cb9d9ea728cc492421bbd43568601c7b6e4f1d9abc4731768f1c333b6aa20631f08c59b2ca25d156f88e383af9230606cd9754ecc
- SSDEEP 196608:l8Vb618U68Vb618US18UGWqQI0pyi8Vb618U68Vb618US18UGWqQI0pyily:2cDcyqWqQjp2cDcyqWqQjpJl
- TLSH T1E5478D13F6A940E9E06ED5748B668332EB72BC525B31A6CF0250B7191F73AD05F39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_dc79a3daa069a1c8db06e719dd0581e6_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_dc79a3daa069a1c8db06e719dd0581e6_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_dc79a3daa069a1c8db06e719dd0581e6_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 24.3MB
- SHA256 0b65a21234d41795f848fa9fea516f1da6d53f6613390b41cbeabfb32c7ae442
- MD5 dc79a3daa069a1c8db06e719dd0581e6
- SHA1 40c2180da7f82aab215f5a3ac7f275e606ec29b8
- SHA512 ad041b9888eccf6f9f7b0c2cb9d9ea728cc492421bbd43568601c7b6e4f1d9abc4731768f1c333b6aa20631f08c59b2ca25d156f88e383af9230606cd9754ecc
- SSDEEP 196608:l8Vb618U68Vb618US18UGWqQI0pyi8Vb618U68Vb618US18UGWqQI0pyily:2cDcyqWqQjp2cDcyqWqQjpJl
- TLSH T1E5478D13F6A940E9E06ED5748B668332EB72BC525B31A6CF0250B7191F73AD05F39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application