General
- Target 2026-08-08_cbd250946a6d6cc6e0cd133cb7ffd97a_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_stealc_vidar
- Size 15.6MB
- Sample260808-c7pgksgk6w
- SHA256 37fb70a391db3aac1442a221dad25fd793ca3a6a2e0404cffc9a8577dcc71d27
- MD5 cbd250946a6d6cc6e0cd133cb7ffd97a
- SHA1 50559e9b7ab71cbcfdfdd84cf2e3a3e63c6ffcf3
- SHA512 654cfb3edfdb4114bf0b4e22c4d2469541e3ea73d90cb7f2ac069a008822d68d59104b67a4223f997b31d6af52e3569031bbffceb40bb4d14bff1d4bcfe7703d
- SSDEEP 196608:3NVe7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTouA:beahvQHrc8u3xXJ/f4uUWHP
- TLSH T11FF69D17B34681F6C02AE2B886474322E7B9BC440331A7DB16D5BB692F77BE4573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-08_cbd250946a6d6cc6e0cd133cb7ffd97a_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_cbd250946a6d6cc6e0cd133cb7ffd97a_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_cbd250946a6d6cc6e0cd133cb7ffd97a_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_stealc_vidar
- Size 15.6MB
- SHA256 37fb70a391db3aac1442a221dad25fd793ca3a6a2e0404cffc9a8577dcc71d27
- MD5 cbd250946a6d6cc6e0cd133cb7ffd97a
- SHA1 50559e9b7ab71cbcfdfdd84cf2e3a3e63c6ffcf3
- SHA512 654cfb3edfdb4114bf0b4e22c4d2469541e3ea73d90cb7f2ac069a008822d68d59104b67a4223f997b31d6af52e3569031bbffceb40bb4d14bff1d4bcfe7703d
- SSDEEP 196608:3NVe7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTouA:beahvQHrc8u3xXJ/f4uUWHP
- TLSH T11FF69D17B34681F6C02AE2B886474322E7B9BC440331A7DB16D5BB692F77BE4573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Detects executables packed with SmartAssembly
-
Detects executables packed with Yano Obfuscator
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.