General
- Target 2026-08-07_1fb859a643748ded94a18972770f43e4_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 17.4MB
- Sample260808-b61msafn8z
- SHA256 2f0686141d9ba1902fe00623b6df0ab3c048fbb16f336c32313c6aa9508092da
- MD5 1fb859a643748ded94a18972770f43e4
- SHA1 e7f959a9781c4309ee45d2054cec255aea0d5c49
- SHA512 7754a720965fa1b2c864468b6769beabf9cd0b194e8ea9f1a8d68279b8e1ae64864af60d1c46f65e76efa34e2ea4fcf4f3d38edab5cf115c5dd8615e7ae358e0
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzzvyEYc/b3w89/h1+1:2cD2cDIEU8IBJzvyEYKbE
- TLSH T17D078D16BBA440F5E17BD534C9A68636EB727C120B319BCB0354E66E2F336D05E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_1fb859a643748ded94a18972770f43e4_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_1fb859a643748ded94a18972770f43e4_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_1fb859a643748ded94a18972770f43e4_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 17.4MB
- SHA256 2f0686141d9ba1902fe00623b6df0ab3c048fbb16f336c32313c6aa9508092da
- MD5 1fb859a643748ded94a18972770f43e4
- SHA1 e7f959a9781c4309ee45d2054cec255aea0d5c49
- SHA512 7754a720965fa1b2c864468b6769beabf9cd0b194e8ea9f1a8d68279b8e1ae64864af60d1c46f65e76efa34e2ea4fcf4f3d38edab5cf115c5dd8615e7ae358e0
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzzvyEYc/b3w89/h1+1:2cD2cDIEU8IBJzvyEYKbE
- TLSH T17D078D16BBA440F5E17BD534C9A68636EB727C120B319BCB0354E66E2F336D05E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry