General
- Target 2026-08-07_7755daa592e744c924d26d857d0a56ba_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 62.8MB
- Sample260808-bhkxesfj6z
- SHA256 47498e5e9c7e5f39359c565b1cbb56c975a67b79045eb12a758f60d129290118
- MD5 7755daa592e744c924d26d857d0a56ba
- SHA1 4282d6206ab0cad0ecbc265fe9d1ac0c87b1d2dd
- SHA512 970c72afcb34af95d70123b1069b711538e8a620f573bfea26a8a035da0b9c506aaf193b4a941345a212bcad4a90bae22b5a2d04dc07fe34f006a4cd624af4a9
- SSDEEP 393216:2cD2cDBcD2cDR6cD2cDBcD2cDRbUEtQevvqc2W1cpV2XI32i:tZ2ZPZ2ZmE8c23pV2X+T
- TLSH T1BEE77C52B7E443E2E37A953489B58272EB727C1A0F3197AB4274F21E1E336D05E35722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_7755daa592e744c924d26d857d0a56ba_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_7755daa592e744c924d26d857d0a56ba_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_7755daa592e744c924d26d857d0a56ba_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 62.8MB
- SHA256 47498e5e9c7e5f39359c565b1cbb56c975a67b79045eb12a758f60d129290118
- MD5 7755daa592e744c924d26d857d0a56ba
- SHA1 4282d6206ab0cad0ecbc265fe9d1ac0c87b1d2dd
- SHA512 970c72afcb34af95d70123b1069b711538e8a620f573bfea26a8a035da0b9c506aaf193b4a941345a212bcad4a90bae22b5a2d04dc07fe34f006a4cd624af4a9
- SSDEEP 393216:2cD2cDBcD2cDR6cD2cDBcD2cDRbUEtQevvqc2W1cpV2XI32i:tZ2ZPZ2ZmE8c23pV2X+T
- TLSH T1BEE77C52B7E443E2E37A953489B58272EB727C1A0F3197AB4274F21E1E336D05E35722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry