General
- Target 2026-08-10_b7331d67eeb06cf18eec6859c1e08622_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.0MB
- Sample260810-1rtncsak9x
- SHA256 63f644c19f3f381088b352012518bdcf035e3af7dc2e3304bdfdff23a29bb2c8
- MD5 b7331d67eeb06cf18eec6859c1e08622
- SHA1 38b84fb55e350d867b5245432e970dbd2faa7364
- SHA512 85e744f64ff4ec74ff8aa7d0fe778ad6d4632457568c11335ae5435bbfeb038f2018140f5f4acddee3a5076bc259f06c6955e98c9017776ea3e027efe0f28778
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp+joNLapIFoq2Vjnm:JSWyZ/K0ttYVAAT1Kmd0eoNcIFGn
- TLSH T166D66C13B1E440A9D1AAD134CF668631E7727C598BF1A6EF324076D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_b7331d67eeb06cf18eec6859c1e08622_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_b7331d67eeb06cf18eec6859c1e08622_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_b7331d67eeb06cf18eec6859c1e08622_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.0MB
- SHA256 63f644c19f3f381088b352012518bdcf035e3af7dc2e3304bdfdff23a29bb2c8
- MD5 b7331d67eeb06cf18eec6859c1e08622
- SHA1 38b84fb55e350d867b5245432e970dbd2faa7364
- SHA512 85e744f64ff4ec74ff8aa7d0fe778ad6d4632457568c11335ae5435bbfeb038f2018140f5f4acddee3a5076bc259f06c6955e98c9017776ea3e027efe0f28778
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp+joNLapIFoq2Vjnm:JSWyZ/K0ttYVAAT1Kmd0eoNcIFGn
- TLSH T166D66C13B1E440A9D1AAD134CF668631E7727C598BF1A6EF324076D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry