General
- Target 2026-08-08_600eec618689143a2c2bde65c018ebd2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.6MB
- Sample260808-rw9eyaycrg
- SHA256 1492a853e74d413cbeb6fb4a328944665ccfb3a480ce89bba4f7c964e320b992
- MD5 600eec618689143a2c2bde65c018ebd2
- SHA1 fafe75a44f53e00a37e5b6ab48b1a7df714199af
- SHA512 0b88a5b59b36d700ec6fb528298794d4b67af66e701e7d2ac734e222015eea7322928e01466f8160ea9c26379f21720e0ef170807e3d1a51cda9a6b1c2217a5f
- SSDEEP 196608:l8Vb618U68Vb618US14/h1+CKmd0t8Vb618U68Vb618US14/h1+CKmd0qj:2cDcyzq9cDcyzqPj
- TLSH T11F178D13F69444E9D06AC074CA968235EB727C550BB1A6DF2390F6D92E33AD07F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_600eec618689143a2c2bde65c018ebd2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_600eec618689143a2c2bde65c018ebd2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_600eec618689143a2c2bde65c018ebd2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 18.6MB
- SHA256 1492a853e74d413cbeb6fb4a328944665ccfb3a480ce89bba4f7c964e320b992
- MD5 600eec618689143a2c2bde65c018ebd2
- SHA1 fafe75a44f53e00a37e5b6ab48b1a7df714199af
- SHA512 0b88a5b59b36d700ec6fb528298794d4b67af66e701e7d2ac734e222015eea7322928e01466f8160ea9c26379f21720e0ef170807e3d1a51cda9a6b1c2217a5f
- SSDEEP 196608:l8Vb618U68Vb618US14/h1+CKmd0t8Vb618U68Vb618US14/h1+CKmd0qj:2cDcyzq9cDcyzqPj
- TLSH T11F178D13F69444E9D06AC074CA968235EB727C550BB1A6DF2390F6D92E33AD07F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application