General
- Target 2026-08-20_2ca9a8e8695e04beb55e541efde5f86d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 34.2MB
- Sample260820-gtywbabf86
- SHA256 43612f360c81ad2932b1b3c40a6bc1a7e8141ed67e589fc0daa9fe7dc0d95e0e
- MD5 2ca9a8e8695e04beb55e541efde5f86d
- SHA1 e214940a2c50ac6f58932d9003e77396a5d72458
- SHA512 6876ec5578fdc96f3ad86fe5fb14b79ffe0de9e734fef38e7a88409c7d76d0f91a8b6c7e789fe4bf67a11ef173901d84a3f3ea399f5db367450db5681c141dff
- SSDEEP 393216:2cDcyqWqQjpHUEtQevvqc2W1cpV2XI32i:tAy1fjp0E8c23pV2X+T
- TLSH T14C775B52B6E843E2E36AD53485B58272EB717C0E1F31A6BB0178F21E1E376D05E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_2ca9a8e8695e04beb55e541efde5f86d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_2ca9a8e8695e04beb55e541efde5f86d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_2ca9a8e8695e04beb55e541efde5f86d_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 34.2MB
- SHA256 43612f360c81ad2932b1b3c40a6bc1a7e8141ed67e589fc0daa9fe7dc0d95e0e
- MD5 2ca9a8e8695e04beb55e541efde5f86d
- SHA1 e214940a2c50ac6f58932d9003e77396a5d72458
- SHA512 6876ec5578fdc96f3ad86fe5fb14b79ffe0de9e734fef38e7a88409c7d76d0f91a8b6c7e789fe4bf67a11ef173901d84a3f3ea399f5db367450db5681c141dff
- SSDEEP 393216:2cDcyqWqQjpHUEtQevvqc2W1cpV2XI32i:tAy1fjp0E8c23pV2X+T
- TLSH T14C775B52B6E843E2E36AD53485B58272EB717C0E1F31A6BB0178F21E1E376D05E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application