General
- Target 2026-08-09_9b818d46ec2ad08ba1fb8c8afdf005bf_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 4.9MB
- Sample260809-m6s4gswfrb
- SHA256 c30661bfa3bc31aee426dfc53490b983fa9a3bf9c45bb0a05cd5ddafac62c9ad
- MD5 9b818d46ec2ad08ba1fb8c8afdf005bf
- SHA1 a1e23fd4c6f7a594d53bb481cc2bbf3776522eea
- SHA512 d34dee9163ecf7fac3018f31c4371748ee2b0dcd7c1fede4cbb001d8fc6712f4711f051f9580656cc2e8926f1fa104175d6cc284fee3e74de41aecf84f4ffee0
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglnhOwY5fqatgljmpYqQY5GkP3a56rGmGeW4SP:TID41qM5ram6m5FPXrtefkZc
- TLSH T15C363A15B7A44672E0738175C9A6969AFE3278114F328BCF1240AB6D6F737C0EA35732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_9b818d46ec2ad08ba1fb8c8afdf005bf_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_9b818d46ec2ad08ba1fb8c8afdf005bf_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_9b818d46ec2ad08ba1fb8c8afdf005bf_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 4.9MB
- SHA256 c30661bfa3bc31aee426dfc53490b983fa9a3bf9c45bb0a05cd5ddafac62c9ad
- MD5 9b818d46ec2ad08ba1fb8c8afdf005bf
- SHA1 a1e23fd4c6f7a594d53bb481cc2bbf3776522eea
- SHA512 d34dee9163ecf7fac3018f31c4371748ee2b0dcd7c1fede4cbb001d8fc6712f4711f051f9580656cc2e8926f1fa104175d6cc284fee3e74de41aecf84f4ffee0
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglnhOwY5fqatgljmpYqQY5GkP3a56rGmGeW4SP:TID41qM5ram6m5FPXrtefkZc
- TLSH T15C363A15B7A44672E0738175C9A6969AFE3278114F328BCF1240AB6D6F737C0EA35732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory