General
- Target 2026-08-08_1bdbccbc1c38ffc47271c6d8c6913498_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 48.9MB
- Sample260808-wspnkssdkd
- SHA256 3e815d0d4b0a664ebbcf1930c1f81e63ea655556e17518c26a1b7105585b153a
- MD5 1bdbccbc1c38ffc47271c6d8c6913498
- SHA1 81d4662a9c0425753f5088eb39c8caaa0f236cdb
- SHA512 7439dfc77252bbede4b40177cac43a63331495aee1de86496d17ceea22d5b8e8e4bde2b2a0d60e36e02bb09f14ad352f6e45572fe570b2189cc4039e9d384b96
- SSDEEP 393216:2cDcyqWqQjp2cDcyqWqQjpCacDcyqWqQjp2cDcyqWqQjpCEe:tAy1fjptAy1fjpeAy1fjptAy1fjpC
- TLSH T1CDB78D13F6A940E9E06ED5748B668332EB72BC525B31A6CF0250B7191F73AD05F39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_1bdbccbc1c38ffc47271c6d8c6913498_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_1bdbccbc1c38ffc47271c6d8c6913498_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_1bdbccbc1c38ffc47271c6d8c6913498_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 48.9MB
- SHA256 3e815d0d4b0a664ebbcf1930c1f81e63ea655556e17518c26a1b7105585b153a
- MD5 1bdbccbc1c38ffc47271c6d8c6913498
- SHA1 81d4662a9c0425753f5088eb39c8caaa0f236cdb
- SHA512 7439dfc77252bbede4b40177cac43a63331495aee1de86496d17ceea22d5b8e8e4bde2b2a0d60e36e02bb09f14ad352f6e45572fe570b2189cc4039e9d384b96
- SSDEEP 393216:2cDcyqWqQjp2cDcyqWqQjpCacDcyqWqQjp2cDcyqWqQjpCEe:tAy1fjptAy1fjpeAy1fjptAy1fjpC
- TLSH T1CDB78D13F6A940E9E06ED5748B668332EB72BC525B31A6CF0250B7191F73AD05F39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application