General
- Target 2026-08-21_9b8873d2630583fe267ddd04ae9a6e57_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar
- Size 5.0MB
- Sample260821-fw6hhatdnc
- SHA256 4af72f8512a6092806805a7ff4a6b0943d7951a1b56443509d77ae9b14c8c89c
- MD5 9b8873d2630583fe267ddd04ae9a6e57
- SHA1 8bcfd7afa524dbf8e7d3ce8211abb038723e11ba
- SHA512 7f2fb8396e9dfc6df3d5c8683cbb63fd41d32cf7b2de59d0f2b3b74c33f44f11a250b977d319d8328977e49d5590b5ae16355dc5366c19d0dfd8a7912aba2795
- SSDEEP 49152:nj9LxcO4Q5Yb6AydNPFq6AydNPFq6AydNPFq6AydNPFq6AyluACpWKdip3xExvW+:njBxcO4EYu1x1x1x11CMZxExvn
- TLSH T13D363912BBE54078E4B31A7199BADB315676BC610F20C7CF5694FA1E2E32B908D35723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_9b8873d2630583fe267ddd04ae9a6e57_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_9b8873d2630583fe267ddd04ae9a6e57_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_9b8873d2630583fe267ddd04ae9a6e57_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar
- Size 5.0MB
- SHA256 4af72f8512a6092806805a7ff4a6b0943d7951a1b56443509d77ae9b14c8c89c
- MD5 9b8873d2630583fe267ddd04ae9a6e57
- SHA1 8bcfd7afa524dbf8e7d3ce8211abb038723e11ba
- SHA512 7f2fb8396e9dfc6df3d5c8683cbb63fd41d32cf7b2de59d0f2b3b74c33f44f11a250b977d319d8328977e49d5590b5ae16355dc5366c19d0dfd8a7912aba2795
- SSDEEP 49152:nj9LxcO4Q5Yb6AydNPFq6AydNPFq6AydNPFq6AydNPFq6AyluACpWKdip3xExvW+:njBxcO4EYu1x1x1x11CMZxExvn
- TLSH T13D363912BBE54078E4B31A7199BADB315676BC610F20C7CF5694FA1E2E32B908D35723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory