General
- Target 2026-08-11_6ef8f131fb1038dfa3dce4af7bf5dd6e_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry
- Size 18.5MB
- Sample260811-2md8jszxht
- SHA256 5b614f6b95434bb07c34571928c7bf663c5203e8d2b9144f4eb346c837194422
- MD5 6ef8f131fb1038dfa3dce4af7bf5dd6e
- SHA1 77d15a7a082e7868fb152eaa90b2b41d5440b61d
- SHA512 8a13b2b20e3822cf0d438845deff65d34a98d1a148ee207914917f2766db79ba2ca8a177c80fa63bdabc03b0617889bf8b89bd1ba2199cda0da9273cf8289416
- SSDEEP 196608:l8Vb618L8Vb618A8Vb618L8Vb618A8Vb618L8Vb618A8Vb618L8Vb618bu:2c7cSc7c6c7cSc7c+u
- TLSH T11D176A16E69440F5D16E9530C7AA9232FA73B8120BB197CB43E4C62D1F336D06E7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_6ef8f131fb1038dfa3dce4af7bf5dd6e_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_6ef8f131fb1038dfa3dce4af7bf5dd6e_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_6ef8f131fb1038dfa3dce4af7bf5dd6e_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry
- Size 18.5MB
- SHA256 5b614f6b95434bb07c34571928c7bf663c5203e8d2b9144f4eb346c837194422
- MD5 6ef8f131fb1038dfa3dce4af7bf5dd6e
- SHA1 77d15a7a082e7868fb152eaa90b2b41d5440b61d
- SHA512 8a13b2b20e3822cf0d438845deff65d34a98d1a148ee207914917f2766db79ba2ca8a177c80fa63bdabc03b0617889bf8b89bd1ba2199cda0da9273cf8289416
- SSDEEP 196608:l8Vb618L8Vb618A8Vb618L8Vb618A8Vb618L8Vb618A8Vb618L8Vb618bu:2c7cSc7c6c7cSc7c+u
- TLSH T11D176A16E69440F5D16E9530C7AA9232FA73B8120BB197CB43E4C62D1F336D06E7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry