General
- Target 2026-08-16_940d72bcafc2f4d68278835bb6f3f05a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_remcos_vidar_wannacry
- Size 25.8MB
- Sample260816-mgqbashl41
- SHA256 6280317012f23e8a47c5fd2f8db7892c1395630e31de4ad52a38cad85a48a5a8
- MD5 940d72bcafc2f4d68278835bb6f3f05a
- SHA1 e92a9d228bfa72276ce341821933eba8c0e11924
- SHA512 57f73c26e6a5a482e6af9506b39779be7c194b1f5b3396dcf323b72112cb9ba937e43bf502236700abc52a2b378c2174230e094b5341295e32e93cb8d8f8ee01
- SSDEEP 196608:Ji8kJUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJH6:FkJUEtQevvqc2W1cpV2XI326
- TLSH T17A474A91BBE843E2E3AA953484B582B6EBB1BC0E1F35933F1179F21E1E376905D15321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_940d72bcafc2f4d68278835bb6f3f05a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_940d72bcafc2f4d68278835bb6f3f05a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_940d72bcafc2f4d68278835bb6f3f05a_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_remcos_vidar_wannacry
- Size 25.8MB
- SHA256 6280317012f23e8a47c5fd2f8db7892c1395630e31de4ad52a38cad85a48a5a8
- MD5 940d72bcafc2f4d68278835bb6f3f05a
- SHA1 e92a9d228bfa72276ce341821933eba8c0e11924
- SHA512 57f73c26e6a5a482e6af9506b39779be7c194b1f5b3396dcf323b72112cb9ba937e43bf502236700abc52a2b378c2174230e094b5341295e32e93cb8d8f8ee01
- SSDEEP 196608:Ji8kJUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJH6:FkJUEtQevvqc2W1cpV2XI326
- TLSH T17A474A91BBE843E2E3AA953484B582B6EBB1BC0E1F35933F1179F21E1E376905D15321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry