General
- Target 2026-08-19_f59d8d69f6b9f6b5a67889d23c044072_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 14.6MB
- Sample260819-ecl43swcph
- SHA256 bd36d7c564a6ff1fb416e69345e0e317d45b68466e317c04f065d619ec2fcece
- MD5 f59d8d69f6b9f6b5a67889d23c044072
- SHA1 0b66ba6c570852617fcb913d75c18c46e04a98af
- SHA512 d7fde865882854c8fbf794c43a8ab9c8b3deec3611d77b8e244982083a418fc98a3e0f29e302870179571a75782ca99b69fc826deef75b4a945707e804713f60
- SSDEEP 98304:Su5x6M1pLapIkoq2Vjnm/sXu5x6M1pLapIkoq2Vjnm/seQvGAdlCEL8c/bRNw5CV:JtcIkGnUsgtcIkGnUsvvyEYc/b3w8Co
- TLSH T183F65A1276E480A5D1AAC134CF668632E3B17C154BF097EB5251E6DE2F336D07E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_f59d8d69f6b9f6b5a67889d23c044072_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_f59d8d69f6b9f6b5a67889d23c044072_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_f59d8d69f6b9f6b5a67889d23c044072_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 14.6MB
- SHA256 bd36d7c564a6ff1fb416e69345e0e317d45b68466e317c04f065d619ec2fcece
- MD5 f59d8d69f6b9f6b5a67889d23c044072
- SHA1 0b66ba6c570852617fcb913d75c18c46e04a98af
- SHA512 d7fde865882854c8fbf794c43a8ab9c8b3deec3611d77b8e244982083a418fc98a3e0f29e302870179571a75782ca99b69fc826deef75b4a945707e804713f60
- SSDEEP 98304:Su5x6M1pLapIkoq2Vjnm/sXu5x6M1pLapIkoq2Vjnm/seQvGAdlCEL8c/bRNw5CV:JtcIkGnUsgtcIkGnUsvvyEYc/b3w8Co
- TLSH T183F65A1276E480A5D1AAC134CF668632E3B17C154BF097EB5251E6DE2F336D07E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry