General
- Target 2026-08-08_9e773f4ee2d1e36e7ae4dea4537f5fdc_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_smoke-loader_vidar
- Size 6.6MB
- Sample260808-ff1x3stwfv
- SHA256 ba3963001f9a0ae4b2797f4745ce51bc6b086bddb5604e8a172f59053592558d
- MD5 9e773f4ee2d1e36e7ae4dea4537f5fdc
- SHA1 54b3e2a81e185fcf7ba35745783512b8a1b4d9bb
- SHA512 245729feba017d95a246a6075b15d5962ee15dc6fc5f3145f2274d6412b34fb236a2edd3723795c8e41c813df79a7a9c6c98f298cb01c331a01d24c668a9a62d
- SSDEEP 98304:vjBxcO4EYkf2xZPzNsGb6d3KRtjBxcO4EYkf2xZPzNsGb6d3KRV:vjBxcO4rZPzmGcEjBxcO4rZPzmGcc
- TLSH T18D66AF22F69244F5C86361B0167A7676D775BA200B2AA6CF6388DD352F34AC1DF38743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-08_9e773f4ee2d1e36e7ae4dea4537f5fdc_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_9e773f4ee2d1e36e7ae4dea4537f5fdc_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_9e773f4ee2d1e36e7ae4dea4537f5fdc_amadey_cobalt-strike_elex_glassworm_hijackloader_rhadamanthys_smoke-loader_vidar
- Size 6.6MB
- SHA256 ba3963001f9a0ae4b2797f4745ce51bc6b086bddb5604e8a172f59053592558d
- MD5 9e773f4ee2d1e36e7ae4dea4537f5fdc
- SHA1 54b3e2a81e185fcf7ba35745783512b8a1b4d9bb
- SHA512 245729feba017d95a246a6075b15d5962ee15dc6fc5f3145f2274d6412b34fb236a2edd3723795c8e41c813df79a7a9c6c98f298cb01c331a01d24c668a9a62d
- SSDEEP 98304:vjBxcO4EYkf2xZPzNsGb6d3KRtjBxcO4EYkf2xZPzNsGb6d3KRV:vjBxcO4rZPzmGcEjBxcO4rZPzmGcc
- TLSH T18D66AF22F69244F5C86361B0167A7676D775BA200B2AA6CF6388DD352F34AC1DF38743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory