General
- Target 2026-08-08_efbc212a6eb0d303e3e0b79598aa25a7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stop_vidar_wannacry
- Size 14.2MB
- Sample260808-ngzemswape
- SHA256 fcdf3110469e1ddf283d8c6783ffa7c0ef9b63819f8545b7c938d9a9ab9162d4
- MD5 efbc212a6eb0d303e3e0b79598aa25a7
- SHA1 d01f16289dfb80eb0fc935dbe4816c2430e64ea3
- SHA512 038e38aefcd17d157dda6de9f7588b871e5eb0b58c7581ecda2d6305ff5ea0c845ab0ac7e3eba5d8a05644f0c3c098ac0c797f1a50b06bcfcc60b92546c7821a
- SSDEEP 393216:qaGbIfPR7yZ/K0ttYZTrEoIbUwF1VERmj2bn:qaGiRyZ/K0ttYZTrEoIY092bn
- TLSH T11CE6BF13B1E540A9E0AAE174CF7583319BB27C698BF191DF224072D91F72AD07B39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_efbc212a6eb0d303e3e0b79598aa25a7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_efbc212a6eb0d303e3e0b79598aa25a7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_efbc212a6eb0d303e3e0b79598aa25a7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stop_vidar_wannacry
- Size 14.2MB
- SHA256 fcdf3110469e1ddf283d8c6783ffa7c0ef9b63819f8545b7c938d9a9ab9162d4
- MD5 efbc212a6eb0d303e3e0b79598aa25a7
- SHA1 d01f16289dfb80eb0fc935dbe4816c2430e64ea3
- SHA512 038e38aefcd17d157dda6de9f7588b871e5eb0b58c7581ecda2d6305ff5ea0c845ab0ac7e3eba5d8a05644f0c3c098ac0c797f1a50b06bcfcc60b92546c7821a
- SSDEEP 393216:qaGbIfPR7yZ/K0ttYZTrEoIbUwF1VERmj2bn:qaGiRyZ/K0ttYZTrEoIY092bn
- TLSH T11CE6BF13B1E540A9E0AAE174CF7583319BB27C698BF191DF224072D91F72AD07B39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory