General
- Target 2026-08-13_5c150134a044edd2bf93928910ee68a4_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry
- Size 37.1MB
- Sample260813-lh65rswere
- SHA256 6abc19c9022d77f76bac413894b06cb28ce33a1c04bcd486f461d3293c6d426a
- MD5 5c150134a044edd2bf93928910ee68a4
- SHA1 11e7639f294f33ad34e4ed28e164691568302473
- SHA512 e71d16ccedff5c674327c7f78db01c0a2b8b358417a46c132e8ad55d17d982759ee858e27692c3e285e48e07d1184c889f5e0a116c27c9b8bf6f69457ed7b0a8
- SSDEEP 393216:2c7cSc7c6c7cSc7c3c7cSc7c6c7cSc7cxj:tYRYZYRYMYRYZYRYd
- TLSH T10F876A16E69440F5D16E9530C7A69232FA73B8120BA197CB43E4C63D1F336D06EBA727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_5c150134a044edd2bf93928910ee68a4_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_5c150134a044edd2bf93928910ee68a4_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_5c150134a044edd2bf93928910ee68a4_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry
- Size 37.1MB
- SHA256 6abc19c9022d77f76bac413894b06cb28ce33a1c04bcd486f461d3293c6d426a
- MD5 5c150134a044edd2bf93928910ee68a4
- SHA1 11e7639f294f33ad34e4ed28e164691568302473
- SHA512 e71d16ccedff5c674327c7f78db01c0a2b8b358417a46c132e8ad55d17d982759ee858e27692c3e285e48e07d1184c889f5e0a116c27c9b8bf6f69457ed7b0a8
- SSDEEP 393216:2c7cSc7c6c7cSc7c3c7cSc7c6c7cSc7cxj:tYRYZYRYMYRYZYRYd
- TLSH T10F876A16E69440F5D16E9530C7A69232FA73B8120BA197CB43E4C63D1F336D06EBA727
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry