General
- Target 2026-08-20_cc4ccef5770945f2ebaee31f4dbea6d2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.3MB
- Sample260820-eyjababd29
- SHA256 1c3bbb15f5791f8d4ae1cdd7d299709afff43062cd81711a01539545bb680ced
- MD5 cc4ccef5770945f2ebaee31f4dbea6d2
- SHA1 eab7a76e49b6c79213cf0d4fc4385abe7d57e15f
- SHA512 2f77cbd83e54a5b5c75a1b15589059618d980adf15d69911e81f9e746f9714a9054a45ed89bcbe1daa1ca489aa0a2130eac024b768000061130133b3033804bc
- SSDEEP 98304:Su5x6M1pLapIkoq2Vjnm/s4oq2VjnmSnUm8UO:JtcIkGnUs4Gn918UO
- TLSH T17F966C1672A481E4C1AAC274CF568622F3B17C194FF097EF5255B6CE1E33AD07A3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_cc4ccef5770945f2ebaee31f4dbea6d2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_cc4ccef5770945f2ebaee31f4dbea6d2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_cc4ccef5770945f2ebaee31f4dbea6d2_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.3MB
- SHA256 1c3bbb15f5791f8d4ae1cdd7d299709afff43062cd81711a01539545bb680ced
- MD5 cc4ccef5770945f2ebaee31f4dbea6d2
- SHA1 eab7a76e49b6c79213cf0d4fc4385abe7d57e15f
- SHA512 2f77cbd83e54a5b5c75a1b15589059618d980adf15d69911e81f9e746f9714a9054a45ed89bcbe1daa1ca489aa0a2130eac024b768000061130133b3033804bc
- SSDEEP 98304:Su5x6M1pLapIkoq2Vjnm/s4oq2VjnmSnUm8UO:JtcIkGnUs4Gn918UO
- TLSH T17F966C1672A481E4C1AAC274CF568622F3B17C194FF097EF5255B6CE1E33AD07A3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry