General
- Target 2026-08-10_c6102e2a18549de1b1e439d02c9d5a03_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 36.6MB
- Sample260810-sbgpvs1emg
- SHA256 9ec99439f8e350abe698680a569fe4f80a619ca2be52dbef35b6587eb9adf8f8
- MD5 c6102e2a18549de1b1e439d02c9d5a03
- SHA1 7ddbb891984f147fb9d2d2a15bb1941ecdd25e2e
- SHA512 60bd7d3cdc6d66ccecbfad5d33060970789a051ef6ffdbf25ca5bb3155135454aeb1f23bb19ccc531f81c5d1943508d768cb9554469ff8d857373325377e1132
- SSDEEP 393216:2cDc6cDcSvyEYKb7cDc6cDcSvyEYKbf6cDc3o:tAZA2aAZA2bA4
- TLSH T1C2878E16BBA440F5E17AD5348A669632EB72BC120B319BCF4390F61D2F336D05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_c6102e2a18549de1b1e439d02c9d5a03_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_c6102e2a18549de1b1e439d02c9d5a03_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_c6102e2a18549de1b1e439d02c9d5a03_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 36.6MB
- SHA256 9ec99439f8e350abe698680a569fe4f80a619ca2be52dbef35b6587eb9adf8f8
- MD5 c6102e2a18549de1b1e439d02c9d5a03
- SHA1 7ddbb891984f147fb9d2d2a15bb1941ecdd25e2e
- SHA512 60bd7d3cdc6d66ccecbfad5d33060970789a051ef6ffdbf25ca5bb3155135454aeb1f23bb19ccc531f81c5d1943508d768cb9554469ff8d857373325377e1132
- SSDEEP 393216:2cDc6cDcSvyEYKb7cDc6cDcSvyEYKbf6cDc3o:tAZA2aAZA2bA4
- TLSH T1C2878E16BBA440F5E17AD5348A669632EB72BC120B319BCF4390F61D2F336D05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application