General
- Target 2026-08-07_95635a4b7c0d5e48a5e5f21636a224be_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 43.2MB
- Sample260808-batvcsztfz
- SHA256 71e78eda5604054da3807c68ea79d864a4863b0be915e7fcac2c6eb9fec1dd3b
- MD5 95635a4b7c0d5e48a5e5f21636a224be
- SHA1 292926c4f9c540a91522cdbdb58e8d1831c06ba8
- SHA512 bbb50f029d7286c9bdbe046460818246a2659f2827adbb16d6dd4c5f3cf7e11a1c2da77c600f80ebc8e0092f61da90be6b92058755a327adc77d7f78370d7f8d
- SSDEEP 393216:2cD2cDBcD2cDnUEtQevvqc2W1cpV2XI32i:tZ2ZAE8c23pV2X+T
- TLSH T153A76B52B6E443E2E3AA953489B58272EB727C1E1F3197BB4278F21E1E336D05D35321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_95635a4b7c0d5e48a5e5f21636a224be_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_95635a4b7c0d5e48a5e5f21636a224be_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_95635a4b7c0d5e48a5e5f21636a224be_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 43.2MB
- SHA256 71e78eda5604054da3807c68ea79d864a4863b0be915e7fcac2c6eb9fec1dd3b
- MD5 95635a4b7c0d5e48a5e5f21636a224be
- SHA1 292926c4f9c540a91522cdbdb58e8d1831c06ba8
- SHA512 bbb50f029d7286c9bdbe046460818246a2659f2827adbb16d6dd4c5f3cf7e11a1c2da77c600f80ebc8e0092f61da90be6b92058755a327adc77d7f78370d7f8d
- SSDEEP 393216:2cD2cDBcD2cDnUEtQevvqc2W1cpV2XI32i:tZ2ZAE8c23pV2X+T
- TLSH T153A76B52B6E443E2E3AA953489B58272EB727C1E1F3197BB4278F21E1E336D05D35321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application