General
- Target 2026-08-10_b600fdf37a49599fd31fcfc1c088e01e_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 28.5MB
- Sample260810-wypkrsep81
- SHA256 d4413ae7347fe6608767b54c69a4fe0b9fde9b7d794c7882ca9b8229ea02c644
- MD5 b600fdf37a49599fd31fcfc1c088e01e
- SHA1 fcff8871f2e0ba852b9f3c4f2217eb20fd9f836e
- SHA512 9d6f2488278e9a3e791a08ddbd07e36d917f6c3af2e21d7bdc9b3424bce1d7e06c82bc0243346a0010d8000cd35803b6411b87fd7b934d80cabb29963bf61285
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+JEU8IBtzL/h1+E8Vb618U68Vbb8Vb61j:2cD2cDUEU8IBJucD2cDUEU8IBJao
- TLSH T181679D16F6A440F5E07AD57489A69236EB72BC520B3187CF0364F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_b600fdf37a49599fd31fcfc1c088e01e_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_b600fdf37a49599fd31fcfc1c088e01e_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_b600fdf37a49599fd31fcfc1c088e01e_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 28.5MB
- SHA256 d4413ae7347fe6608767b54c69a4fe0b9fde9b7d794c7882ca9b8229ea02c644
- MD5 b600fdf37a49599fd31fcfc1c088e01e
- SHA1 fcff8871f2e0ba852b9f3c4f2217eb20fd9f836e
- SHA512 9d6f2488278e9a3e791a08ddbd07e36d917f6c3af2e21d7bdc9b3424bce1d7e06c82bc0243346a0010d8000cd35803b6411b87fd7b934d80cabb29963bf61285
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+JEU8IBtzL/h1+E8Vb618U68Vbb8Vb61j:2cD2cDUEU8IBJucD2cDUEU8IBJao
- TLSH T181679D16F6A440F5E07AD57489A69236EB72BC520B3187CF0364F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry