General
- Target 2026-08-13_f72ec2e83c2e6e2d29ab7b5edb42223f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 43.1MB
- Sample260813-dafnvazflg
- SHA256 d29786f0f4e0225529c2a8ee4e2a10085bc227d35ba949008e5ae7e07304afa5
- MD5 f72ec2e83c2e6e2d29ab7b5edb42223f
- SHA1 abcbb831190a8d79c206db54fdeefaa8ad360fdb
- SHA512 4220962c6d9d717220f968f435ef2510161dfe1dd804e02041ba660a5840dd61da9bca370d69241c20e92106e66def960f36d9908ddbafbd645d77f90ab3f734
- SSDEEP 393216:2cDcyqWqQjpmcDcyqWqQjpOcDcyqWqQjpmcDcyqWqQjpQ:tAy1fjp9Ay1fjpFAy1fjp9Ay1fjpQ
- TLSH T197A78C13F6E940E8E06ED5748B669332EA72BC525B31A6CF0350B7192E73AD05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_f72ec2e83c2e6e2d29ab7b5edb42223f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_f72ec2e83c2e6e2d29ab7b5edb42223f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_f72ec2e83c2e6e2d29ab7b5edb42223f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 43.1MB
- SHA256 d29786f0f4e0225529c2a8ee4e2a10085bc227d35ba949008e5ae7e07304afa5
- MD5 f72ec2e83c2e6e2d29ab7b5edb42223f
- SHA1 abcbb831190a8d79c206db54fdeefaa8ad360fdb
- SHA512 4220962c6d9d717220f968f435ef2510161dfe1dd804e02041ba660a5840dd61da9bca370d69241c20e92106e66def960f36d9908ddbafbd645d77f90ab3f734
- SSDEEP 393216:2cDcyqWqQjpmcDcyqWqQjpOcDcyqWqQjpmcDcyqWqQjpQ:tAy1fjp9Ay1fjpFAy1fjp9Ay1fjpQ
- TLSH T197A78C13F6E940E8E06ED5748B669332EA72BC525B31A6CF0350B7192E73AD05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application