General
- Target 2026-08-10_cf1eeda8d8d40d9e7e8abdf3ce004435_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 6.7MB
- Sample260810-tj656ahc42
- SHA256 12344214454e9e70a3d39cb555ea4130efa7af746b9dee5345ed373adc4064b1
- MD5 cf1eeda8d8d40d9e7e8abdf3ce004435
- SHA1 be44381dcf432798d7e44e0ce12d705b8505f373
- SHA512 09251a9eff5a4a0c44d60ce47358396bd0928a5c589078b509a84787b583e15c55e2c8c7c294d0ff1ac1daf2d967196ddbc9674899ed84f6bcc0a1dd3fe4ed6f
- SSDEEP 98304:jjBxcO4EYt1fVIxQeMjLsAAvjBxcO4EYt1fVIxQeMjLsAAQ:jjBxcO4dl5eGZcjBxcO4dl5eGZv
- TLSH T181668D02E3924076DCA2257D846A67750634BE702F32D3DBAA44751EFEF1BC15D323AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-10_cf1eeda8d8d40d9e7e8abdf3ce004435_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-st.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_cf1eeda8d8d40d9e7e8abdf3ce004435_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-st.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_cf1eeda8d8d40d9e7e8abdf3ce004435_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 6.7MB
- SHA256 12344214454e9e70a3d39cb555ea4130efa7af746b9dee5345ed373adc4064b1
- MD5 cf1eeda8d8d40d9e7e8abdf3ce004435
- SHA1 be44381dcf432798d7e44e0ce12d705b8505f373
- SHA512 09251a9eff5a4a0c44d60ce47358396bd0928a5c589078b509a84787b583e15c55e2c8c7c294d0ff1ac1daf2d967196ddbc9674899ed84f6bcc0a1dd3fe4ed6f
- SSDEEP 98304:jjBxcO4EYt1fVIxQeMjLsAAvjBxcO4EYt1fVIxQeMjLsAAQ:jjBxcO4dl5eGZcjBxcO4dl5eGZv
- TLSH T181668D02E3924076DCA2257D846A67750634BE702F32D3DBAA44751EFEF1BC15D323AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory