General
- Target 2026-08-17_6325de70daba411b233e6e05064fadaa_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 59.5MB
- Sample260817-qf8m2a1dkf
- SHA256 d2229e624aa522220cb58ece25b1ab6408939ab0e65cc7c8663cce83e1d37221
- MD5 6325de70daba411b233e6e05064fadaa
- SHA1 9c55c7095fe81c80a77a8bcb4f080ac48dd698a9
- SHA512 2910597076f9180a0c9f9392701fde7c0485fb8aa865f1a11b0750f90f462c96893113db40725c690cd15dc0097e1758b3bad6b38c567de6bcd62bd460fd6c64
- SSDEEP 1572864:tZUZ/K0ttYRzZUZ/K0ttYR54ZUZ/K0ttYRzZUZ/K0ttYRp:tZrRzZrR54ZrRzZrRp
- TLSH T157D78D13F6E440E5E17AD534CA669232EB32BC550B7196CF2250F6992E33AD0BF39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_6325de70daba411b233e6e05064fadaa_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_6325de70daba411b233e6e05064fadaa_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_6325de70daba411b233e6e05064fadaa_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 59.5MB
- SHA256 d2229e624aa522220cb58ece25b1ab6408939ab0e65cc7c8663cce83e1d37221
- MD5 6325de70daba411b233e6e05064fadaa
- SHA1 9c55c7095fe81c80a77a8bcb4f080ac48dd698a9
- SHA512 2910597076f9180a0c9f9392701fde7c0485fb8aa865f1a11b0750f90f462c96893113db40725c690cd15dc0097e1758b3bad6b38c567de6bcd62bd460fd6c64
- SSDEEP 1572864:tZUZ/K0ttYRzZUZ/K0ttYR54ZUZ/K0ttYRzZUZ/K0ttYRp:tZrRzZrR54ZrRzZrRp
- TLSH T157D78D13F6E440E5E17AD534CA669232EB32BC550B7196CF2250F6992E33AD0BF39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry