General
- Target 2026-08-09_d5adf61dbd0ceb09de484f7a75a02d28_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 15.7MB
- Sample260809-tcsn7ahn2x
- SHA256 2db94c24ab4acc36f8f29731f6082583dd6364f380e578a630bd434d170e4927
- MD5 d5adf61dbd0ceb09de484f7a75a02d28
- SHA1 dde6d111e09cb5e91f075689a3ac37faf17a1f8d
- SHA512 8c9bc6681859d582b3e7da718f1f4804198b1eede6322086bd1ea6f07047351a8391e9e5e9114c7b167d1f1c5867cc5ef2e7388c676f6b201e89c3ec498fa059
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0hSWyZ/K0ttYVAAT1Kmd0:zyZ/K0ttYZTEqiyZ/K0ttYZTEq
- TLSH T16CF66B03F2A940E9E19AD174CE269231DB32BC594BF1A5EF325076D52E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_d5adf61dbd0ceb09de484f7a75a02d28_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_d5adf61dbd0ceb09de484f7a75a02d28_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_d5adf61dbd0ceb09de484f7a75a02d28_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 15.7MB
- SHA256 2db94c24ab4acc36f8f29731f6082583dd6364f380e578a630bd434d170e4927
- MD5 d5adf61dbd0ceb09de484f7a75a02d28
- SHA1 dde6d111e09cb5e91f075689a3ac37faf17a1f8d
- SHA512 8c9bc6681859d582b3e7da718f1f4804198b1eede6322086bd1ea6f07047351a8391e9e5e9114c7b167d1f1c5867cc5ef2e7388c676f6b201e89c3ec498fa059
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0hSWyZ/K0ttYVAAT1Kmd0:zyZ/K0ttYZTEqiyZ/K0ttYZTEq
- TLSH T16CF66B03F2A940E9E19AD174CE269231DB32BC594BF1A5EF325076D52E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application