General
- Target 2026-08-08_a498daae3848f5611f1b69e6a50bdbfb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 38.6MB
- Sample260808-v2epasvzgv
- SHA256 d6946b7dffedd9833d80b9c849cd911220f0cc1d6ba57e89bd085c1b29e9b16f
- MD5 a498daae3848f5611f1b69e6a50bdbfb
- SHA1 5fbdce984dcb445a8b67665827710c1feffeaab3
- SHA512 a6215c78011e1ff0e3b97d370e514f919ad7473cc3e819c7d0fba49ecde301aea8b0147711458bebec9fdabbf9eb4e33add673f6219a9bc35b59382b2a325737
- SSDEEP 196608:l8Vb618U68Vb618US14/h1+mcI/8Vb618U68Vb618US14/h1+mcIu2VhF8Vb618S:2cDcyZdcDcyZLeccDcyZdcDcyZLe1
- TLSH T1C1977B23B2A540E9D06AD030CB569231EBB27C554BF197DB5250B2D92F33AD07F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_a498daae3848f5611f1b69e6a50bdbfb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_a498daae3848f5611f1b69e6a50bdbfb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_a498daae3848f5611f1b69e6a50bdbfb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 38.6MB
- SHA256 d6946b7dffedd9833d80b9c849cd911220f0cc1d6ba57e89bd085c1b29e9b16f
- MD5 a498daae3848f5611f1b69e6a50bdbfb
- SHA1 5fbdce984dcb445a8b67665827710c1feffeaab3
- SHA512 a6215c78011e1ff0e3b97d370e514f919ad7473cc3e819c7d0fba49ecde301aea8b0147711458bebec9fdabbf9eb4e33add673f6219a9bc35b59382b2a325737
- SSDEEP 196608:l8Vb618U68Vb618US14/h1+mcI/8Vb618U68Vb618US14/h1+mcIu2VhF8Vb618S:2cDcyZdcDcyZLeccDcyZdcDcyZLe1
- TLSH T1C1977B23B2A540E9D06AD030CB569231EBB27C554BF197DB5250B2D92F33AD07F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry