General
- Target 2026-08-07_7153162684cfccefcf671a51a3041960_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.9MB
- Sample260808-bj2asszvgt
- SHA256 0f48a3b4e7a2808e78405109caf2916559f2f36100cb91d6c9aa1f9b3e446db6
- MD5 7153162684cfccefcf671a51a3041960
- SHA1 fc02029b0810e7dfab25fe403e5741f9b7f7a8d7
- SHA512 4c1108c60fd08ae2ca4d9037b5fb4ff3eb8038e3cdb3556da19bd7fb3474854cd834be14a746cbab9b29686c7a935f9e84ec41024ffc055794a041cd4f25f83e
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+FGn:2cD2cD0G
- TLSH T13DC68D16B6A840F5E1BAC9748AA68636EB327C110B31D7DF4354F61D1E336D09E3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_7153162684cfccefcf671a51a3041960_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_7153162684cfccefcf671a51a3041960_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_7153162684cfccefcf671a51a3041960_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.9MB
- SHA256 0f48a3b4e7a2808e78405109caf2916559f2f36100cb91d6c9aa1f9b3e446db6
- MD5 7153162684cfccefcf671a51a3041960
- SHA1 fc02029b0810e7dfab25fe403e5741f9b7f7a8d7
- SHA512 4c1108c60fd08ae2ca4d9037b5fb4ff3eb8038e3cdb3556da19bd7fb3474854cd834be14a746cbab9b29686c7a935f9e84ec41024ffc055794a041cd4f25f83e
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+FGn:2cD2cD0G
- TLSH T13DC68D16B6A840F5E1BAC9748AA68636EB327C110B31D7DF4354F61D1E336D09E3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry