General
- Target 2026-08-12_f313ce0a705ef67d54582cd4083ef034_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 17.5MB
- Sample260812-3sz8msxapd
- SHA256 4c721d9946efcf45f0cc95ab0401d5ff370e9e967e4632f0381082fd4f404e03
- MD5 f313ce0a705ef67d54582cd4083ef034
- SHA1 bb6343c4663380282d65050564829f42d46c4261
- SHA512 9dc2b8e879dc062b9a15b62c791b3832b515d94cab289112146be95eedaec1d4ee575a753284695ec6fe0a800afd11efcce3d1fd181ca65b49e9e2637793361b
- SSDEEP 196608:l8Vb618U68Vb618US18U9o8Vb618U68Vb618US18U9B1nGn:2cDcy7cDcydG
- TLSH T186078D16B6A881F5D0BAC57486969676FA727C420B309BDF0350F71D2E33AD09F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_f313ce0a705ef67d54582cd4083ef034_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_f313ce0a705ef67d54582cd4083ef034_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_f313ce0a705ef67d54582cd4083ef034_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 17.5MB
- SHA256 4c721d9946efcf45f0cc95ab0401d5ff370e9e967e4632f0381082fd4f404e03
- MD5 f313ce0a705ef67d54582cd4083ef034
- SHA1 bb6343c4663380282d65050564829f42d46c4261
- SHA512 9dc2b8e879dc062b9a15b62c791b3832b515d94cab289112146be95eedaec1d4ee575a753284695ec6fe0a800afd11efcce3d1fd181ca65b49e9e2637793361b
- SSDEEP 196608:l8Vb618U68Vb618US18U9o8Vb618U68Vb618US18U9B1nGn:2cDcy7cDcydG
- TLSH T186078D16B6A881F5D0BAC57486969676FA727C420B309BDF0350F71D2E33AD09F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application