General
- Target 2026-08-08_800a28fcb6ad6005f2127496e39d5e6d_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 2.9MB
- Sample260808-flexsstxgx
- SHA256 9eef33c5f96e34322d00b8e37528f26a2eb2ab08a64ca4dfe3ee4b2056815dd8
- MD5 800a28fcb6ad6005f2127496e39d5e6d
- SHA1 cc770d20adbffe86d485e5e06c987b1b8378f335
- SHA512 547eb42165a66264c33ca562c38551b0723525aa86633803daf67d69794afa974247074434069c97b15e91cc6ce6fcc24a136986678241ee18c333de6b1743ee
- SSDEEP 49152:nj9LxcO4Q5YljGvNPF01wMPyqNaXPpmq6aDRaYSDA+ouZ/K0tDmNhJXLkZRJ+0YF:njBxcO4EYljM1TMPydXPYJARUZ/K0tKt
- TLSH T13BD57C03F3C581F8D4678171561AE2769921BC300B24A9DFB690BB592F77EE09B39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_800a28fcb6ad6005f2127496e39d5e6d_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_800a28fcb6ad6005f2127496e39d5e6d_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_800a28fcb6ad6005f2127496e39d5e6d_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 2.9MB
- SHA256 9eef33c5f96e34322d00b8e37528f26a2eb2ab08a64ca4dfe3ee4b2056815dd8
- MD5 800a28fcb6ad6005f2127496e39d5e6d
- SHA1 cc770d20adbffe86d485e5e06c987b1b8378f335
- SHA512 547eb42165a66264c33ca562c38551b0723525aa86633803daf67d69794afa974247074434069c97b15e91cc6ce6fcc24a136986678241ee18c333de6b1743ee
- SSDEEP 49152:nj9LxcO4Q5YljGvNPF01wMPyqNaXPpmq6aDRaYSDA+ouZ/K0tDmNhJXLkZRJ+0YF:njBxcO4EYljM1TMPydXPYJARUZ/K0tKt
- TLSH T13BD57C03F3C581F8D4678171561AE2769921BC300B24A9DFB690BB592F77EE09B39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory