General
- Target 2026-08-18_66c67610720a08db3de2f10d4fd439d4_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 15.3MB
- Sample260818-sdctpavaqe
- SHA256 b9d30145d18484772cf27a52528ad69bb9711be5ec64f551fb99a6f1c34b2420
- MD5 66c67610720a08db3de2f10d4fd439d4
- SHA1 9712ef565ba94db2faf532705026c9d526566f60
- SHA512 b78e0bac5533ec49d95e264dc925469037ca50315f8f789642058de8fbb220e334a1bd9aa57f2eb300e120a40ba9abf05b7d5a30c3854f8ba75be1e56898a030
- SSDEEP 196608:Qi8kLV/h1+5i8kLV/h1+mi8kLV/h1+5i8kLV/h1+J:IkLikLlkLikLo
- TLSH T1F8F68D42B6E4417AE07B8534D5B69676EA727C420B21DACF5285F61E2E337C0DA36333
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_66c67610720a08db3de2f10d4fd439d4_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_66c67610720a08db3de2f10d4fd439d4_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_66c67610720a08db3de2f10d4fd439d4_amadey_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 15.3MB
- SHA256 b9d30145d18484772cf27a52528ad69bb9711be5ec64f551fb99a6f1c34b2420
- MD5 66c67610720a08db3de2f10d4fd439d4
- SHA1 9712ef565ba94db2faf532705026c9d526566f60
- SHA512 b78e0bac5533ec49d95e264dc925469037ca50315f8f789642058de8fbb220e334a1bd9aa57f2eb300e120a40ba9abf05b7d5a30c3854f8ba75be1e56898a030
- SSDEEP 196608:Qi8kLV/h1+5i8kLV/h1+mi8kLV/h1+5i8kLV/h1+J:IkLikLlkLikLo
- TLSH T1F8F68D42B6E4417AE07B8534D5B69676EA727C420B21DACF5285F61E2E337C0DA36333
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry