General
- Target 2026-08-07_77a68b7c017308c9c2391c5dd41fd35a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 26.2MB
- Sample260808-bg6shazvdv
- SHA256 e92ce0b2c7662182ac7b045aad5d57214347dbf740ff077d0eb447c803fd9bdc
- MD5 77a68b7c017308c9c2391c5dd41fd35a
- SHA1 61bd9468fd79e180ca8ccb16ec5d263d8b9e3006
- SHA512 bdfa98ea6725e1ef609203ffb5f1b40bdde593c6b76e1190de215a49b58898cd3b7c285527effb41acbe277426d155c355401a973cee6259a57d322cdc4d2de7
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzL/h1+E8Vb618U68Vbb8Vb61J:2cD2cDIEU8IBJucD2cDIEU8IBJi
- TLSH T1E4579E16F6A440F5D17AC534C5A69236EB72BC120B318BCB53A4F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_77a68b7c017308c9c2391c5dd41fd35a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_77a68b7c017308c9c2391c5dd41fd35a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_77a68b7c017308c9c2391c5dd41fd35a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 26.2MB
- SHA256 e92ce0b2c7662182ac7b045aad5d57214347dbf740ff077d0eb447c803fd9bdc
- MD5 77a68b7c017308c9c2391c5dd41fd35a
- SHA1 61bd9468fd79e180ca8ccb16ec5d263d8b9e3006
- SHA512 bdfa98ea6725e1ef609203ffb5f1b40bdde593c6b76e1190de215a49b58898cd3b7c285527effb41acbe277426d155c355401a973cee6259a57d322cdc4d2de7
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzL/h1+E8Vb618U68Vbb8Vb61J:2cD2cDIEU8IBJucD2cDIEU8IBJi
- TLSH T1E4579E16F6A440F5D17AC534C5A69236EB72BC120B318BCB53A4F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry