General
- Target 2026-08-17_9e2da25ab448cab496e336a4714989bb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 34.5MB
- Sample260817-ceernsdl3t
- SHA256 a01222abdda3198b7af4ad545f06f2e1e8e64cedb76ae3814e99b4618d7e763c
- MD5 9e2da25ab448cab496e336a4714989bb
- SHA1 bd815b1c1d502637d22d62535527fb93d34b143d
- SHA512 4e9e111177d826c9e298bb59693e5432b3f7a554362c085606bfbf4aa12610be0e05c2a6d78adbc62f62d7178118122177901974fafa3179aada9373c6825238
- SSDEEP 393216:I5G+ob5G+oKvyEYKbaGR5G+ob5G+oKvyEYu:I47b47+LR47b47+j
- TLSH T1CB875B16B6A440E4D1AAC134CB568632F3B27C154BF097EB5251F69E2F33AD07E3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_9e2da25ab448cab496e336a4714989bb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_9e2da25ab448cab496e336a4714989bb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_9e2da25ab448cab496e336a4714989bb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 34.5MB
- SHA256 a01222abdda3198b7af4ad545f06f2e1e8e64cedb76ae3814e99b4618d7e763c
- MD5 9e2da25ab448cab496e336a4714989bb
- SHA1 bd815b1c1d502637d22d62535527fb93d34b143d
- SHA512 4e9e111177d826c9e298bb59693e5432b3f7a554362c085606bfbf4aa12610be0e05c2a6d78adbc62f62d7178118122177901974fafa3179aada9373c6825238
- SSDEEP 393216:I5G+ob5G+oKvyEYKbaGR5G+ob5G+oKvyEYu:I47b47+LR47b47+j
- TLSH T1CB875B16B6A440E4D1AAC134CB568632F3B27C154BF097EB5251F69E2F33AD07E3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application