General
- Target 2026-08-19_6051e4448b3534bb1666bae638e7f3eb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.3MB
- Sample260819-stps7axbra
- SHA256 2f7ef319ece86293caa7677ea6ef725d3164beb259d871576dd21e66631e5976
- MD5 6051e4448b3534bb1666bae638e7f3eb
- SHA1 15e3a174bb312de4fe0adcacd7e47e18ca9bce92
- SHA512 c1239044b5259a16689ce82bfd1a0c0f962754453e185c0a7e1683893f2753d7014ed9359b5f5d437aa0db07b9047c6ac10110b5007043594d7aa07a616dc5ef
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbfFiV+XenmE3/zVmtf6ZpJIUq:Su5x6M1pLapIkoq2Vjnm/sI
- TLSH T1F7466C2676E440A5C1A9C134CF568732E3B17C298FF197EBA115B2CE1E336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_6051e4448b3534bb1666bae638e7f3eb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_6051e4448b3534bb1666bae638e7f3eb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_6051e4448b3534bb1666bae638e7f3eb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.3MB
- SHA256 2f7ef319ece86293caa7677ea6ef725d3164beb259d871576dd21e66631e5976
- MD5 6051e4448b3534bb1666bae638e7f3eb
- SHA1 15e3a174bb312de4fe0adcacd7e47e18ca9bce92
- SHA512 c1239044b5259a16689ce82bfd1a0c0f962754453e185c0a7e1683893f2753d7014ed9359b5f5d437aa0db07b9047c6ac10110b5007043594d7aa07a616dc5ef
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTMCbRquA/m2yL5zbfFiV+XenmE3/zVmtf6ZpJIUq:Su5x6M1pLapIkoq2Vjnm/sI
- TLSH T1F7466C2676E440A5C1A9C134CF568732E3B17C298FF197EBA115B2CE1E336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry