General
- Target 2026-08-14_c7f9cbc9c3973923066528c90cce78e3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 31.0MB
- Sample260814-prh13stbqc
- SHA256 3154f479b2759be60dc4ab79e07cf3bb59f293ea1e8285918f6806a6f84e3507
- MD5 c7f9cbc9c3973923066528c90cce78e3
- SHA1 1513dbff10e877d733500ed2d95a98b482f0c4e0
- SHA512 9c6ac36cda2ca703559a26fbe97390d4b9c5ce8f578dd4afaf898a7513a0e58e5a33c9aced0868f68582e28fbe1dd6bc1ffe80da6717434eb58ccf8b46528cbb
- SSDEEP 196608:l8Vb618U68Vb618US18U9o8Vb618U68Vb618US18U9B1h8Vb618U68Vb618US18J:2cDcy7cDcy8cDcy7cDcyp
- TLSH T1DC679D17F6A841F6D07AD4748A969636EA727C520B309ACF0390F71D2E336D09F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_c7f9cbc9c3973923066528c90cce78e3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_c7f9cbc9c3973923066528c90cce78e3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_c7f9cbc9c3973923066528c90cce78e3_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 31.0MB
- SHA256 3154f479b2759be60dc4ab79e07cf3bb59f293ea1e8285918f6806a6f84e3507
- MD5 c7f9cbc9c3973923066528c90cce78e3
- SHA1 1513dbff10e877d733500ed2d95a98b482f0c4e0
- SHA512 9c6ac36cda2ca703559a26fbe97390d4b9c5ce8f578dd4afaf898a7513a0e58e5a33c9aced0868f68582e28fbe1dd6bc1ffe80da6717434eb58ccf8b46528cbb
- SSDEEP 196608:l8Vb618U68Vb618US18U9o8Vb618U68Vb618US18U9B1h8Vb618U68Vb618US18J:2cDcy7cDcy8cDcy7cDcyp
- TLSH T1DC679D17F6A841F6D07AD4748A969636EA727C520B309ACF0390F71D2E336D09F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application