General
- Target 2026-08-08_80f462649a6eb401428f2cd232a41f64_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.1MB
- Sample260808-flbv5stxfz
- SHA256 8547f51aae383383e87eccd509f41825db8daec2e026ae2052797eed3a4e8f2f
- MD5 80f462649a6eb401428f2cd232a41f64
- SHA1 8981d2a2e1bb0a40341108be15a182b9ce33a9c1
- SHA512 deecf680e183e7415c81869ebda49517b78af3d7682127e18a8c83e39b8c98d94894df729df1d3d9ba1c73e097fc6165c2533ab47245ba366424e2502e3f5461
- SSDEEP 49152:jj9LxcO4Q5YtNPFqKzT2bo4+JZmxSftT0MjL/gxkOjc9210tAN8foh0Y1oQTrG:jjBxcO4EYt1fVIxQeMjLsAANN880IG
- TLSH T1A7168D01E3828072DC66257C94A9A7251734BEB02F32C3DBAB54B25DAEF17C15D3636B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-08_80f462649a6eb401428f2cd232a41f64_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-st.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_80f462649a6eb401428f2cd232a41f64_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-st.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_80f462649a6eb401428f2cd232a41f64_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 4.1MB
- SHA256 8547f51aae383383e87eccd509f41825db8daec2e026ae2052797eed3a4e8f2f
- MD5 80f462649a6eb401428f2cd232a41f64
- SHA1 8981d2a2e1bb0a40341108be15a182b9ce33a9c1
- SHA512 deecf680e183e7415c81869ebda49517b78af3d7682127e18a8c83e39b8c98d94894df729df1d3d9ba1c73e097fc6165c2533ab47245ba366424e2502e3f5461
- SSDEEP 49152:jj9LxcO4Q5YtNPFqKzT2bo4+JZmxSftT0MjL/gxkOjc9210tAN8foh0Y1oQTrG:jjBxcO4EYt1fVIxQeMjLsAANN880IG
- TLSH T1A7168D01E3828072DC66257C94A9A7251734BEB02F32C3DBAB54B25DAEF17C15D3636B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory