General
- Target 2026-08-10_10e77c282720c5f0cd2fc95cb850e9a2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 18.8MB
- Sample260810-s24mbacl61
- SHA256 96be2060da9f333e5241900fa61355cd41bc803a09baa12515034923d4af99c8
- MD5 10e77c282720c5f0cd2fc95cb850e9a2
- SHA1 ced554cce183858703a2ac499d7b4c5aa6c08fcc
- SHA512 a1fd5fe9a9c249cf3880ec84f04b25ae1e21fd066b8204157551ef4c66beb0fe228559fe065c5b73548b852c11ff6dca85299f72ec82af1e603c122056e7402d
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmHu5x6M1pLapIkoq2Vjnmku5x6M1pLapIkoq2VjnmHu5f:JtcIkGnNtcIkGnGtcIkGnNtcIkGn7D
- TLSH T153175B1672E440A5C199C134CF568632E3F27C298FF097EBA255B6DD2F336D07A3A216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_10e77c282720c5f0cd2fc95cb850e9a2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_10e77c282720c5f0cd2fc95cb850e9a2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_10e77c282720c5f0cd2fc95cb850e9a2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 18.8MB
- SHA256 96be2060da9f333e5241900fa61355cd41bc803a09baa12515034923d4af99c8
- MD5 10e77c282720c5f0cd2fc95cb850e9a2
- SHA1 ced554cce183858703a2ac499d7b4c5aa6c08fcc
- SHA512 a1fd5fe9a9c249cf3880ec84f04b25ae1e21fd066b8204157551ef4c66beb0fe228559fe065c5b73548b852c11ff6dca85299f72ec82af1e603c122056e7402d
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmHu5x6M1pLapIkoq2Vjnmku5x6M1pLapIkoq2VjnmHu5f:JtcIkGnNtcIkGnGtcIkGnNtcIkGn7D
- TLSH T153175B1672E440A5C199C134CF568632E3F27C298FF097EBA255B6DD2F336D07A3A216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application