General
- Target 2026-08-08_8076ef2057cf5fe27d1d2d67b59ffdd2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 22.7MB
- Sample260808-v9wyjsbj3t
- SHA256 8619c41716b8c8ad008b303fee8943bdeb3ddc49fdfc89ca7e5df7d7507683dc
- MD5 8076ef2057cf5fe27d1d2d67b59ffdd2
- SHA1 56c958792b18fbab2b6a6d254302c74f02a5f36f
- SHA512 df56c31693a4f021918256b1fd7ae821557b7d8e7a3747c2c9578ff5e58c07f700908ac3de845f3199d5898b44a3fe27a0e73069782feefd7529c6df67f9d9fe
- SSDEEP 196608:l8Vb618U68Vb618US14/h1+CKmd0t8Vb618U68Vb618US14/h1+CKmd0uvyEYc/m:2cDcyzq9cDcyzq3vyEYKbi
- TLSH T192378D13B6A440F5D06AD034CA668636EB727C560BB1A6DF1290F69D2F336D07F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_8076ef2057cf5fe27d1d2d67b59ffdd2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_8076ef2057cf5fe27d1d2d67b59ffdd2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_8076ef2057cf5fe27d1d2d67b59ffdd2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 22.7MB
- SHA256 8619c41716b8c8ad008b303fee8943bdeb3ddc49fdfc89ca7e5df7d7507683dc
- MD5 8076ef2057cf5fe27d1d2d67b59ffdd2
- SHA1 56c958792b18fbab2b6a6d254302c74f02a5f36f
- SHA512 df56c31693a4f021918256b1fd7ae821557b7d8e7a3747c2c9578ff5e58c07f700908ac3de845f3199d5898b44a3fe27a0e73069782feefd7529c6df67f9d9fe
- SSDEEP 196608:l8Vb618U68Vb618US14/h1+CKmd0t8Vb618U68Vb618US14/h1+CKmd0uvyEYc/m:2cDcyzq9cDcyzq3vyEYKbi
- TLSH T192378D13B6A440F5D06AD034CA668636EB727C560BB1A6DF1290F69D2F336D07F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry