General
- Target 2026-08-12_3c820943f49b3523595473bd6b449b40_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 2.9MB
- Sample260812-qfdsnavydv
- SHA256 1cbdc6e5f5397b98448d830062d6d5e2dc218b4673e4251ac81aba534582e47e
- MD5 3c820943f49b3523595473bd6b449b40
- SHA1 a187207bf25fe62e9ce9b21b0b1080a226874f20
- SHA512 e95fad6830616f2bcef367652489b7ff8a47091b0e92d975ef5b5ca68694007bfd24a03524c581aaa36b2dae25de3d430f945c6cb745d29283fb8a57ae8c4d35
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglmNY5CBFXpEUOlk0I56rO:TID41m5CgFrO
- TLSH T1CED57C56B7949AB2D16B413585578292AB737C210F2197CF2394BA3D3F337C0AE39B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_3c820943f49b3523595473bd6b449b40_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_3c820943f49b3523595473bd6b449b40_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_3c820943f49b3523595473bd6b449b40_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 2.9MB
- SHA256 1cbdc6e5f5397b98448d830062d6d5e2dc218b4673e4251ac81aba534582e47e
- MD5 3c820943f49b3523595473bd6b449b40
- SHA1 a187207bf25fe62e9ce9b21b0b1080a226874f20
- SHA512 e95fad6830616f2bcef367652489b7ff8a47091b0e92d975ef5b5ca68694007bfd24a03524c581aaa36b2dae25de3d430f945c6cb745d29283fb8a57ae8c4d35
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglmNY5CBFXpEUOlk0I56rO:TID41m5CgFrO
- TLSH T1CED57C56B7949AB2D16B413585578292AB737C210F2197CF2394BA3D3F337C0AE39B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory