General
- Target 2026-08-08_e3a239b4f7cf114d3b56be0b882d1798_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 12.4MB
- Sample260808-swbpcatths
- SHA256 27922f0f24592e89d0bde422d5f3b914043024d874309b9d6d49a735291c421f
- MD5 e3a239b4f7cf114d3b56be0b882d1798
- SHA1 3d193845e959d503ad5eff3a5c1e98b8fabd27c3
- SHA512 10a6ced7f9d949d205f04fdbe438972c839626f09647c376cfe031b8f66de668b4a172828ac6f8b19b13d2f9f95f137f3c8616ddd9cd9d7e9e6929422183af7d
- SSDEEP 196608:l8Vb618U68Vb618US14/h1+mcIQvyEYc/b3w8O:2cDcyZXvyEYKbi
- TLSH T1C5D66B22B6E440F5D06AD034CE668632E7B27C560BB197DB1250F69E2F336D07E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_e3a239b4f7cf114d3b56be0b882d1798_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_e3a239b4f7cf114d3b56be0b882d1798_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_e3a239b4f7cf114d3b56be0b882d1798_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 12.4MB
- SHA256 27922f0f24592e89d0bde422d5f3b914043024d874309b9d6d49a735291c421f
- MD5 e3a239b4f7cf114d3b56be0b882d1798
- SHA1 3d193845e959d503ad5eff3a5c1e98b8fabd27c3
- SHA512 10a6ced7f9d949d205f04fdbe438972c839626f09647c376cfe031b8f66de668b4a172828ac6f8b19b13d2f9f95f137f3c8616ddd9cd9d7e9e6929422183af7d
- SSDEEP 196608:l8Vb618U68Vb618US14/h1+mcIQvyEYc/b3w8O:2cDcyZXvyEYKbi
- TLSH T1C5D66B22B6E440F5D06AD034CE668632E7B27C560BB197DB1250F69E2F336D07E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry