General
- Target 2026-08-18_9daab4afd5426f56fddff469bfceef9c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 54.9MB
- Sample260818-29be6sap91
- SHA256 dce4b7985a2a5c5da9b48a438bd4b7aeb24f0da1c45b6d1a3277c63acf1f2068
- MD5 9daab4afd5426f56fddff469bfceef9c
- SHA1 cc5826cb64be60ce3c6a5ab546543f55d6cbd2af
- SHA512 dd4e536fc218c80b1ab74a4f5c69a78e43289695f6de680fceba51455f4a936ec6e94f1c87d459c075ab3239f5bc7867083497c3d1e19ca94dfd914ace048705
- SSDEEP 1572864:tZUZ/K0ttYRzZUZ/K0ttYR54ZUZ/K0ttYRzZv:tZrRzZrR54ZrRzZv
- TLSH T122C78D13F6E440F5E1BAD5348A669232EB32BC150B7196CF1254F6992F336D0AF39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_9daab4afd5426f56fddff469bfceef9c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_9daab4afd5426f56fddff469bfceef9c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_9daab4afd5426f56fddff469bfceef9c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 54.9MB
- SHA256 dce4b7985a2a5c5da9b48a438bd4b7aeb24f0da1c45b6d1a3277c63acf1f2068
- MD5 9daab4afd5426f56fddff469bfceef9c
- SHA1 cc5826cb64be60ce3c6a5ab546543f55d6cbd2af
- SHA512 dd4e536fc218c80b1ab74a4f5c69a78e43289695f6de680fceba51455f4a936ec6e94f1c87d459c075ab3239f5bc7867083497c3d1e19ca94dfd914ace048705
- SSDEEP 1572864:tZUZ/K0ttYRzZUZ/K0ttYR54ZUZ/K0ttYRzZv:tZrRzZrR54ZrRzZv
- TLSH T122C78D13F6E440F5E1BAD5348A669232EB32BC150B7196CF1254F6992F336D0AF39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry