General
- Target 2026-08-07_00373e8e6597fff8824eeb42d92d3f60_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 23.8MB
- Sample260808-cfr4dsz1hv
- SHA256 70110c4fbd26a23743bdc3e6778b4bdb19716b8b7fc68d9a9027047dcfda90bf
- MD5 00373e8e6597fff8824eeb42d92d3f60
- SHA1 c94eba1ff880399ba367a8e3016112df8336fd08
- SHA512 315355c3aed48400159082cbe6cb50df5397f0dd7e7175e917091253d714c30b338071c610ec82ac81feb25691f0f6356ed2d4fd380af131a1816aa347288d6a
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+/8Vb618U68Vbb8Vb618U68VbCcc6/h1B:2cD2cDBcD2cDWvyEYKbi
- TLSH T169477C12BAE440F5E1BA953089A69632EB727C520B31D7CF4354F61D2F336D09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_00373e8e6597fff8824eeb42d92d3f60_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_00373e8e6597fff8824eeb42d92d3f60_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_00373e8e6597fff8824eeb42d92d3f60_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 23.8MB
- SHA256 70110c4fbd26a23743bdc3e6778b4bdb19716b8b7fc68d9a9027047dcfda90bf
- MD5 00373e8e6597fff8824eeb42d92d3f60
- SHA1 c94eba1ff880399ba367a8e3016112df8336fd08
- SHA512 315355c3aed48400159082cbe6cb50df5397f0dd7e7175e917091253d714c30b338071c610ec82ac81feb25691f0f6356ed2d4fd380af131a1816aa347288d6a
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+/8Vb618U68Vbb8Vb618U68VbCcc6/h1B:2cD2cDBcD2cDWvyEYKbi
- TLSH T169477C12BAE440F5E1BA953089A69632EB727C520B31D7CF4354F61D2F336D09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry