General
- Target 2026-08-16_9d0b13951d0d017e427a25527bbf96e5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.9MB
- Sample260816-cf6lsabm5t
- SHA256 2995ad79309f1fb6b474e07a8089105b4719c9c7800b166c89bb93c50b197ee5
- MD5 9d0b13951d0d017e427a25527bbf96e5
- SHA1 3e5c35a0df3e3998e38cea1f79341ad193e7290d
- SHA512 3cb36a3771e96cba91117bfffdde679ffaa2a76ed2f1f5031f5096f7db71d47250fbe71a0aacb7f58dbbf54ee796dd58ebe3eddadb5f590943044f43cd1ad35e
- SSDEEP 196608:JtcI4/h1+QtcI4/h1+7tcI4/h1+QtcI4/h1+M:IEnE3
- TLSH T1D4D63A22B1E14065C1A99031CF86973597E23C698FF1C7E7B245F2D92F725C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_9d0b13951d0d017e427a25527bbf96e5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_9d0b13951d0d017e427a25527bbf96e5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_9d0b13951d0d017e427a25527bbf96e5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.9MB
- SHA256 2995ad79309f1fb6b474e07a8089105b4719c9c7800b166c89bb93c50b197ee5
- MD5 9d0b13951d0d017e427a25527bbf96e5
- SHA1 3e5c35a0df3e3998e38cea1f79341ad193e7290d
- SHA512 3cb36a3771e96cba91117bfffdde679ffaa2a76ed2f1f5031f5096f7db71d47250fbe71a0aacb7f58dbbf54ee796dd58ebe3eddadb5f590943044f43cd1ad35e
- SSDEEP 196608:JtcI4/h1+QtcI4/h1+7tcI4/h1+QtcI4/h1+M:IEnE3
- TLSH T1D4D63A22B1E14065C1A99031CF86973597E23C698FF1C7E7B245F2D92F725C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry