General
- Target 2026-08-07_944eb07714a03696940e923c122936d4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 39.4MB
- Sample260808-ba3ghawhle
- SHA256 c17cdbbff85ebb58ce22b86a76276fb024d7cfca94623417b28c5667a1456d5c
- MD5 944eb07714a03696940e923c122936d4
- SHA1 0c99c054f6a645b6344553280f4efc0c295f600b
- SHA512 64804a774e47bf094fd63754a185355ce4480c1eae38662b8c885c9f5e4e0ae058edf066198b23278d0c452465d41e84af55a402b93307339dd82f43552eb473
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+/8Vb618U68Vbb8Vb618U68VbCcc6/h1p:2cD2cDBcD2cDR6cD2cDBcD2cDRk
- TLSH T1FF978C16F6E440F5E1BA99308AA69236EB32BC520B31C7CF5354F6191E336D09E36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_944eb07714a03696940e923c122936d4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_944eb07714a03696940e923c122936d4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_944eb07714a03696940e923c122936d4_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 39.4MB
- SHA256 c17cdbbff85ebb58ce22b86a76276fb024d7cfca94623417b28c5667a1456d5c
- MD5 944eb07714a03696940e923c122936d4
- SHA1 0c99c054f6a645b6344553280f4efc0c295f600b
- SHA512 64804a774e47bf094fd63754a185355ce4480c1eae38662b8c885c9f5e4e0ae058edf066198b23278d0c452465d41e84af55a402b93307339dd82f43552eb473
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+/8Vb618U68Vbb8Vb618U68VbCcc6/h1p:2cD2cDBcD2cDR6cD2cDBcD2cDRk
- TLSH T1FF978C16F6E440F5E1BA99308AA69236EB32BC520B31C7CF5354F6191E336D09E36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application