General
- Target 2026-08-09_76ce715b2e8feee89e673db045ea3cbc_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 14.1MB
- Sample260809-w4chdsbq5w
- SHA256 9f5c88f0caa72b8842a0ede0c03ec2f956907198bffe50bc3afe104c5ceddc00
- MD5 76ce715b2e8feee89e673db045ea3cbc
- SHA1 a9bde15e15871706e86172db046fd2da81794337
- SHA512 5064d9fb482f83fece4fd40f3651ddc7d07d42fc53c7a7afd2f2e87db5b0a38e353048f092b50b7f63161d27896ac2c24ec29e0ba75468d1ee1a96018227cb19
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxEu5x6M1pLapIkoq2Vjnmx8q9ceq9+2xl/SSayr:JtcIkGnk3tcIkGnk8WqQI0pyr
- TLSH T195E66B13B2E440A4D1AAC174CF668732E7B17C558BF097EF6215B6C91E33AD07A39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_76ce715b2e8feee89e673db045ea3cbc_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_76ce715b2e8feee89e673db045ea3cbc_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_76ce715b2e8feee89e673db045ea3cbc_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 14.1MB
- SHA256 9f5c88f0caa72b8842a0ede0c03ec2f956907198bffe50bc3afe104c5ceddc00
- MD5 76ce715b2e8feee89e673db045ea3cbc
- SHA1 a9bde15e15871706e86172db046fd2da81794337
- SHA512 5064d9fb482f83fece4fd40f3651ddc7d07d42fc53c7a7afd2f2e87db5b0a38e353048f092b50b7f63161d27896ac2c24ec29e0ba75468d1ee1a96018227cb19
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxEu5x6M1pLapIkoq2Vjnmx8q9ceq9+2xl/SSayr:JtcIkGnk3tcIkGnk8WqQI0pyr
- TLSH T195E66B13B2E440A4D1AAC174CF668732E7B17C558BF097EF6215B6C91E33AD07A39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry