General
- Target 2026-08-13_70ef058924b889324eff3510485694ec_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 40.9MB
- Sample260813-k8f6lavwdv
- SHA256 69c3635fc636a8059d027417e60896ab87e546122e1600c7f2af3e3bc2af9df0
- MD5 70ef058924b889324eff3510485694ec
- SHA1 4f45cd5e92cd9a987ebb585eded5ac2724a07037
- SHA512 faf354d92d1c72fbec595b5bf12b67d81987d4c3bcfbc375746b6ca48180eaac04aaab8a0bb5350489dc1f5399989fe2f882f2c330c39999f3b6c028ca911e46
- SSDEEP 393216:IkLDkL5ovkLDkL5o/jUEtQevvqc2W1cpV2XI32i:IkLDkLevkLDkLeYE8c23pV2X+T
- TLSH T183976B52B6E443E6E3AA953485B68272EB71BC0E1F3197BF0179F21E1E336D05D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_70ef058924b889324eff3510485694ec_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_70ef058924b889324eff3510485694ec_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_70ef058924b889324eff3510485694ec_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 40.9MB
- SHA256 69c3635fc636a8059d027417e60896ab87e546122e1600c7f2af3e3bc2af9df0
- MD5 70ef058924b889324eff3510485694ec
- SHA1 4f45cd5e92cd9a987ebb585eded5ac2724a07037
- SHA512 faf354d92d1c72fbec595b5bf12b67d81987d4c3bcfbc375746b6ca48180eaac04aaab8a0bb5350489dc1f5399989fe2f882f2c330c39999f3b6c028ca911e46
- SSDEEP 393216:IkLDkL5ovkLDkL5o/jUEtQevvqc2W1cpV2XI32i:IkLDkLevkLDkLeYE8c23pV2X+T
- TLSH T183976B52B6E443E6E3AA953485B68272EB71BC0E1F3197BF0179F21E1E336D05D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry