General
- Target 2026-08-11_1152af7d02580add875d6c6fb3a596ad_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 28.1MB
- Sample260811-gmlbmss1bs
- SHA256 5f232ee0ad12bdf02823d6954b03bdd0a9a3e7e47c8563be1c14b5773c5d3c7a
- MD5 1152af7d02580add875d6c6fb3a596ad
- SHA1 6efe88b255c896c4d82b9321f7fee68292d9d81e
- SHA512 534601dd12552727e75240ef2a6d94b9cdb5d7c6b57c559829899390fcc419b42ab69cc98ef139762583a24062a0c48df6ca2891c5fbf3335766c6ff22c4e929
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+JEU8IBtzL/h1+E8Vb618U68Vbb8Vb61T:2cD2cDUEU8IBJucD2cDUEU8IBJBl
- TLSH T191579D16F6A440F5E17AD57489A69236EB72BC120B318BCF0354F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_1152af7d02580add875d6c6fb3a596ad_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_1152af7d02580add875d6c6fb3a596ad_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_1152af7d02580add875d6c6fb3a596ad_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 28.1MB
- SHA256 5f232ee0ad12bdf02823d6954b03bdd0a9a3e7e47c8563be1c14b5773c5d3c7a
- MD5 1152af7d02580add875d6c6fb3a596ad
- SHA1 6efe88b255c896c4d82b9321f7fee68292d9d81e
- SHA512 534601dd12552727e75240ef2a6d94b9cdb5d7c6b57c559829899390fcc419b42ab69cc98ef139762583a24062a0c48df6ca2891c5fbf3335766c6ff22c4e929
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+JEU8IBtzL/h1+E8Vb618U68Vbb8Vb61T:2cD2cDUEU8IBJucD2cDUEU8IBJBl
- TLSH T191579D16F6A440F5E17AD57489A69236EB72BC120B318BCF0354F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry