General
- Target 2026-08-10_1d84c456c6563f2d2926743fe435a360_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 11.3MB
- Sample260810-t2tyjsdj9v
- SHA256 04b9a9e163d754dc3210f26d3d58d0c76a906ed284a3ea33607c5a9c05f1df78
- MD5 1d84c456c6563f2d2926743fe435a360
- SHA1 cbdb5974bd18df25de73f0a715315ef2dc6a39d5
- SHA512 bfb4439538cda018bec0fae63ccf6a72aea13ddc7fbdbb0fa9186e972506b9518c21a27c84813d263b5f449ef136ac3bbe54dfd4ff43e6decaadd5f25a6a6bfa
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb6nUm8USnUm8UGq9ceq9+2xl/SSayb:l8Vb618U68Vb618US18UGWqQI0pyb
- TLSH T1E5C68C13F6E940E9E06ED5748B668332EA72BC525B31A6CF0250B7191F73AD05F39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_1d84c456c6563f2d2926743fe435a360_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_1d84c456c6563f2d2926743fe435a360_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_1d84c456c6563f2d2926743fe435a360_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 11.3MB
- SHA256 04b9a9e163d754dc3210f26d3d58d0c76a906ed284a3ea33607c5a9c05f1df78
- MD5 1d84c456c6563f2d2926743fe435a360
- SHA1 cbdb5974bd18df25de73f0a715315ef2dc6a39d5
- SHA512 bfb4439538cda018bec0fae63ccf6a72aea13ddc7fbdbb0fa9186e972506b9518c21a27c84813d263b5f449ef136ac3bbe54dfd4ff43e6decaadd5f25a6a6bfa
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb6nUm8USnUm8UGq9ceq9+2xl/SSayb:l8Vb618U68Vb618US18UGWqQI0pyb
- TLSH T1E5C68C13F6E940E9E06ED5748B668332EA72BC525B31A6CF0250B7191F73AD05F39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry