General
- Target 2026-08-17_2daa037696abb25fce46fe63cbadaf3c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 20.6MB
- Sample260817-ctvfnsssdw
- SHA256 b7086d7b9559b86892e41ccf622f61db8b51c795294c46be03ba30003ad6c12a
- MD5 2daa037696abb25fce46fe63cbadaf3c
- SHA1 5469304ce7520afb606c16e98d574ca9f7087b27
- SHA512 4602ed721b03fb3ccf7fa9050b9ebec0e999eaafca0f322ed89f8126f4bece975ea2d963463aceb18e12765422641cdbbd15db7f8b624681c0907d2667c07659
- SSDEEP 196608:JtcIkGn+oKLtcIkGn+oKXvyEYc/b3w8OGnotl:I5G+ob5G+oKvyEYKbaGG
- TLSH T1FF276B16B6A440E4D1AAC134CB568632F3B27C154BB097EF5251F69E2F33AD07E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_2daa037696abb25fce46fe63cbadaf3c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_2daa037696abb25fce46fe63cbadaf3c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_2daa037696abb25fce46fe63cbadaf3c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 20.6MB
- SHA256 b7086d7b9559b86892e41ccf622f61db8b51c795294c46be03ba30003ad6c12a
- MD5 2daa037696abb25fce46fe63cbadaf3c
- SHA1 5469304ce7520afb606c16e98d574ca9f7087b27
- SHA512 4602ed721b03fb3ccf7fa9050b9ebec0e999eaafca0f322ed89f8126f4bece975ea2d963463aceb18e12765422641cdbbd15db7f8b624681c0907d2667c07659
- SSDEEP 196608:JtcIkGn+oKLtcIkGn+oKXvyEYc/b3w8OGnotl:I5G+ob5G+oKvyEYKbaGG
- TLSH T1FF276B16B6A440E4D1AAC134CB568632F3B27C154BB097EF5251F69E2F33AD07E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry