General
- Target 2026-08-18_c2169e7b0248e44cf641eefd875f73f5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 66.0MB
- Sample260818-21587atyct
- SHA256 707266d3af7b13a373bbf3dd690db3fe75e3744b4411a8ffbc342c59ec2b65e4
- MD5 c2169e7b0248e44cf641eefd875f73f5
- SHA1 601c52bb8815757f0597586244b1617e568e21a6
- SHA512 f7fb305cc0b9159278dc0663af729fcaa458bf04ffc58c5691cce5b0965ca6a13a9da0f559700a37a9f82e9c1d603dd2735dee9e0311315ae8eadeb4f77c72f8
- SSDEEP 1572864:tZUZ/K0ttYRzZUZ/K0ttYR5ZGZUZ/K0ttYRzZUZ/K0ttYR5ZN:tZrRzZrR5ZGZrRzZrR5ZN
- TLSH T11FE78D13F6E440F5E1BAD534CA668232EB32BC154B7196DF1250F6992E33AD0AF39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_c2169e7b0248e44cf641eefd875f73f5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_c2169e7b0248e44cf641eefd875f73f5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_c2169e7b0248e44cf641eefd875f73f5_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 66.0MB
- SHA256 707266d3af7b13a373bbf3dd690db3fe75e3744b4411a8ffbc342c59ec2b65e4
- MD5 c2169e7b0248e44cf641eefd875f73f5
- SHA1 601c52bb8815757f0597586244b1617e568e21a6
- SHA512 f7fb305cc0b9159278dc0663af729fcaa458bf04ffc58c5691cce5b0965ca6a13a9da0f559700a37a9f82e9c1d603dd2735dee9e0311315ae8eadeb4f77c72f8
- SSDEEP 1572864:tZUZ/K0ttYRzZUZ/K0ttYR5ZGZUZ/K0ttYRzZUZ/K0ttYR5ZN:tZrRzZrR5ZGZrRzZrR5ZN
- TLSH T11FE78D13F6E440F5E1BAD534CA668232EB32BC154B7196DF1250F6992E33AD0AF39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry