General
- Target 2026-08-10_1fd9832e9ff259192e2b46ad2c41cfa0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 64.0MB
- Sample260810-hg7hcstale
- SHA256 7ccbdb21abfb8e667a949d82da9889c249f70c72556b2cbd5031971df9c9c378
- MD5 1fd9832e9ff259192e2b46ad2c41cfa0
- SHA1 f86363c472e3afb115d47541a601e680f3709857
- SHA512 37cb8b6013f010718023b21a0e53aca48f80e38c05aeed8dd137bb77b5dac4ae6e3f9152c4d51c4bf7e407458b65b4d173f803d0bb1011c7787c34b63ceacad5
- SSDEEP 393216:2cD2cD3cD2cDjKDcD2cD3cD2c+cD2cD3cD2cDjKK:tZ4ZCAZ4ZVZ4ZCK
- TLSH T1CAE78C16F6A440F5E17B99308AA69636EA727C520F30C7CF4354F6192F336D09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_1fd9832e9ff259192e2b46ad2c41cfa0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_1fd9832e9ff259192e2b46ad2c41cfa0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_1fd9832e9ff259192e2b46ad2c41cfa0_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 64.0MB
- SHA256 7ccbdb21abfb8e667a949d82da9889c249f70c72556b2cbd5031971df9c9c378
- MD5 1fd9832e9ff259192e2b46ad2c41cfa0
- SHA1 f86363c472e3afb115d47541a601e680f3709857
- SHA512 37cb8b6013f010718023b21a0e53aca48f80e38c05aeed8dd137bb77b5dac4ae6e3f9152c4d51c4bf7e407458b65b4d173f803d0bb1011c7787c34b63ceacad5
- SSDEEP 393216:2cD2cD3cD2cDjKDcD2cD3cD2c+cD2cD3cD2cDjKK:tZ4ZCAZ4ZVZ4ZCK
- TLSH T1CAE78C16F6A440F5E17B99308AA69636EA727C520F30C7CF4354F6192F336D09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry