General
- Target 2026-08-16_6c2fca225198e9c45956c21ff291b03e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.0MB
- Sample260816-mt26macg84
- SHA256 b395c5bab44ec826892da26bed3459d1304c1a8af4c3de3234a7d30a82aab05d
- MD5 6c2fca225198e9c45956c21ff291b03e
- SHA1 afbcf0bba499eba60062a7446d099d648d05c5e5
- SHA512 e8f888bf5fe857ab7db7f4f9401933c3ad0f6596e79fd22fdf8586a5c2d1b093ebca9dc1007b1f2d9ac52e6e144327ad3709f89a40fcfa019ca01558adda49d9
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDklIhx0zOoq2Vjnm:Ji8kbi8kSKzOGn
- TLSH T176868D5572E440A9D1AE86348B668732E3F1BC514F70C7DF8295B61E2E337C09A3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_6c2fca225198e9c45956c21ff291b03e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_6c2fca225198e9c45956c21ff291b03e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_6c2fca225198e9c45956c21ff291b03e_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.0MB
- SHA256 b395c5bab44ec826892da26bed3459d1304c1a8af4c3de3234a7d30a82aab05d
- MD5 6c2fca225198e9c45956c21ff291b03e
- SHA1 afbcf0bba499eba60062a7446d099d648d05c5e5
- SHA512 e8f888bf5fe857ab7db7f4f9401933c3ad0f6596e79fd22fdf8586a5c2d1b093ebca9dc1007b1f2d9ac52e6e144327ad3709f89a40fcfa019ca01558adda49d9
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDklIhx0zOoq2Vjnm:Ji8kbi8kSKzOGn
- TLSH T176868D5572E440A9D1AE86348B668732E3F1BC514F70C7DF8295B61E2E337C09A3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry