General
- Target 2026-08-16_ef9283c297311db802726e4b2e4b3381_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 11.8MB
- Sample260816-ykgdcafe99
- SHA256 12d28a8a142bb233187b0a07fe553f8321028c45c25c43393a2b4e412c56571c
- MD5 ef9283c297311db802726e4b2e4b3381
- SHA1 4320e3784825e77cb97f3d22b85c6f17d3bddafb
- SHA512 dd6cc6b4a98cd62c1894552b05f31d913346240390f60b34a563f83a2a8fc0d106d35eec348c3e9eb47034379d3964dcde1100a2bf451ff052284d74602377be
- SSDEEP 196608:JSWyZ/K0ttYVAA1/h1+KSWyZ/K0ttYVAA1/h1+aGn:zyZ/K0ttYZ3yZ/K0ttYZnG
- TLSH T11AC67D17F59441E9D0AAC178CF96D232EB32784907F1A6EF225187D92E37AD07B39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_ef9283c297311db802726e4b2e4b3381_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_ef9283c297311db802726e4b2e4b3381_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_ef9283c297311db802726e4b2e4b3381_amadey_cobalt-strike_elex_emotet_glassworm_icedid_njrat_remcos_vidar
- Size 11.8MB
- SHA256 12d28a8a142bb233187b0a07fe553f8321028c45c25c43393a2b4e412c56571c
- MD5 ef9283c297311db802726e4b2e4b3381
- SHA1 4320e3784825e77cb97f3d22b85c6f17d3bddafb
- SHA512 dd6cc6b4a98cd62c1894552b05f31d913346240390f60b34a563f83a2a8fc0d106d35eec348c3e9eb47034379d3964dcde1100a2bf451ff052284d74602377be
- SSDEEP 196608:JSWyZ/K0ttYVAA1/h1+KSWyZ/K0ttYVAA1/h1+aGn:zyZ/K0ttYZ3yZ/K0ttYZnG
- TLSH T11AC67D17F59441E9D0AAC178CF96D232EB32784907F1A6EF225187D92E37AD07B39720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry