General
- Target 2026-08-20_0a618a46d11a623fd0d1d900ea55233f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 21.5MB
- Sample260820-dr2mmsbb75
- SHA256 f31a092c28bf64566efc6da0f5f03003f8e2b1730be4354726ea07f76cb52c31
- MD5 0a618a46d11a623fd0d1d900ea55233f
- SHA1 01a5273569ea6869e3a973921f77653e5e0c82b3
- SHA512 6d1553bbfe8ed9db1c38658d69c9ac9933af626489e55e639d79ca3cbccf6ae4eb6067f0b600924d405000c070af4e039b47cb3ceca6b945e78f488f49318bb4
- SSDEEP 196608:l8Vb618U68Vb618US18UGWqQI0pyK8Vb618U68Vb618US18UGWqQI0pyh:2cDcyqWqQjpmcDcyqWqQjpo
- TLSH T1BD378C13F6E940E8E06ED5748B669332EA72BC525B31A6CF0350B7192E73AD05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_0a618a46d11a623fd0d1d900ea55233f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_0a618a46d11a623fd0d1d900ea55233f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_0a618a46d11a623fd0d1d900ea55233f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 21.5MB
- SHA256 f31a092c28bf64566efc6da0f5f03003f8e2b1730be4354726ea07f76cb52c31
- MD5 0a618a46d11a623fd0d1d900ea55233f
- SHA1 01a5273569ea6869e3a973921f77653e5e0c82b3
- SHA512 6d1553bbfe8ed9db1c38658d69c9ac9933af626489e55e639d79ca3cbccf6ae4eb6067f0b600924d405000c070af4e039b47cb3ceca6b945e78f488f49318bb4
- SSDEEP 196608:l8Vb618U68Vb618US18UGWqQI0pyK8Vb618U68Vb618US18UGWqQI0pyh:2cDcyqWqQjpmcDcyqWqQjpo
- TLSH T1BD378C13F6E940E8E06ED5748B669332EA72BC525B31A6CF0350B7192E73AD05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry