General
- Target 2026-08-11_2a03e8baa6054240ed1ebdc07f0033e5_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 13.5MB
- Sample260811-hwcxasdb37
- SHA256 fed562a8c9bd5273d8aee5cf1ae09b0b6e437a7c48b50808ec140ae18c628882
- MD5 2a03e8baa6054240ed1ebdc07f0033e5
- SHA1 b28757ed3f85a3600bfede004a6d9f0ab4a9b737
- SHA512 c69052b1e2a72ea34f4684eebdbb36bc0b98d2b81f899623694da0ded3db925c958606d5b4290d014a0ee15dce80d39982aec1006c78f2c5c5cd4815e98d394f
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+JEU8IBtzL/h1+9b:2cD2cDUEU8IBJC
- TLSH T141E69D16F6A440F5E17AD53489A69236EB72BC120B3187CF5364F62D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_2a03e8baa6054240ed1ebdc07f0033e5_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_2a03e8baa6054240ed1ebdc07f0033e5_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_2a03e8baa6054240ed1ebdc07f0033e5_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 13.5MB
- SHA256 fed562a8c9bd5273d8aee5cf1ae09b0b6e437a7c48b50808ec140ae18c628882
- MD5 2a03e8baa6054240ed1ebdc07f0033e5
- SHA1 b28757ed3f85a3600bfede004a6d9f0ab4a9b737
- SHA512 c69052b1e2a72ea34f4684eebdbb36bc0b98d2b81f899623694da0ded3db925c958606d5b4290d014a0ee15dce80d39982aec1006c78f2c5c5cd4815e98d394f
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+JEU8IBtzL/h1+9b:2cD2cDUEU8IBJC
- TLSH T141E69D16F6A440F5E17AD53489A69236EB72BC120B3187CF5364F62D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry