General
- Target 2026-08-13_4a03f55061525e21fe8a489188029465_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry
- Size 37.1MB
- Sample260813-lrd6caaa52
- SHA256 d203ed34bd4bdc9977b1c3414bfea3b3a2116e916eb998c882eca64eb9c5aaf1
- MD5 4a03f55061525e21fe8a489188029465
- SHA1 ed659ef259c105ef70f42f6055a0326d3a9e2557
- SHA512 c93372978b33d0996789faa3c36f2c2f6150fb0a5f4f5af8807d3bf1a49e6a27c5fbc946a4eea3963d79198ed0de76cef190b2d896d50c8e2fcc0634eb8e6389
- SSDEEP 393216:2c7cSc7c6c7cSc7c3c7cSc7c6c7cSc7cb:tYRYZYRYMYRYZYRYb
- TLSH T1FE876A16E69440F5D16E9530C7A69232FA73B8120BA197CB43E4C63D1F336D06EBA727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_4a03f55061525e21fe8a489188029465_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_4a03f55061525e21fe8a489188029465_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_4a03f55061525e21fe8a489188029465_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar_wannacry
- Size 37.1MB
- SHA256 d203ed34bd4bdc9977b1c3414bfea3b3a2116e916eb998c882eca64eb9c5aaf1
- MD5 4a03f55061525e21fe8a489188029465
- SHA1 ed659ef259c105ef70f42f6055a0326d3a9e2557
- SHA512 c93372978b33d0996789faa3c36f2c2f6150fb0a5f4f5af8807d3bf1a49e6a27c5fbc946a4eea3963d79198ed0de76cef190b2d896d50c8e2fcc0634eb8e6389
- SSDEEP 393216:2c7cSc7c6c7cSc7c3c7cSc7c6c7cSc7cb:tYRYZYRYMYRYZYRYb
- TLSH T1FE876A16E69440F5D16E9530C7A69232FA73B8120BA197CB43E4C63D1F336D06EBA727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application