General
- Target 2026-08-09_990e389f4a584960ce23b4692777b763_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 14.3MB
- Sample260809-w1jsasbp51
- SHA256 3328e94294211264da6bc46bcefb58a26eb685960bdadc7bd2627f4282229934
- MD5 990e389f4a584960ce23b4692777b763
- SHA1 96a6a53b3042eeba1f5f7efcf4c47cdb64faeeb0
- SHA512 a2782b183d650d4a5d2c575b3295f434ef39b20db0699035285b13ac14e4e9e76d3fb2ca037ee2f4c4f21f2ac77f229d310bfb974eca07f5bc7bb57be18c9f4b
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxEu5x6M1pLapIkoq2Vjnmx8q9ceq9+2xl/SSayG:JtcIkGnk3tcIkGnk8WqQI0pyG
- TLSH T1C9E65B13B2E440A5D1AAC174CF668732E7B17C658BF197EF6214B2C91E33AD07A39712
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_990e389f4a584960ce23b4692777b763_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_990e389f4a584960ce23b4692777b763_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_990e389f4a584960ce23b4692777b763_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 14.3MB
- SHA256 3328e94294211264da6bc46bcefb58a26eb685960bdadc7bd2627f4282229934
- MD5 990e389f4a584960ce23b4692777b763
- SHA1 96a6a53b3042eeba1f5f7efcf4c47cdb64faeeb0
- SHA512 a2782b183d650d4a5d2c575b3295f434ef39b20db0699035285b13ac14e4e9e76d3fb2ca037ee2f4c4f21f2ac77f229d310bfb974eca07f5bc7bb57be18c9f4b
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxEu5x6M1pLapIkoq2Vjnmx8q9ceq9+2xl/SSayG:JtcIkGnk3tcIkGnk8WqQI0pyG
- TLSH T1C9E65B13B2E440A5D1AAC174CF668732E7B17C658BF197EF6214B2C91E33AD07A39712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry