General
- Target 2026-08-21_630cb257bdee13b8ea337d7f40367af7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 9.3MB
- Sample260822-rb7qlshk5w
- SHA256 4beb88ce4fa2cbbe293280ad6263579e420c2e0598a1cf093af352ba4dea2d69
- MD5 630cb257bdee13b8ea337d7f40367af7
- SHA1 56f38e7655b0790923e6a5f8ed796f0e8745ea0b
- SHA512 2f337a809d22e19ae22491494b11d1dce726818ebb6e2159a90f4a92e49e062209e792f2780e180f42ed1b53dbee7dab696280010c91052705362623ad7d1637
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmQ+WQtZ/K0tGOFWVRuLftCT:JtcIkGn4WyZ/K0ttYVAAT
- TLSH T144A66C13B2E540A8D1AAD134CF668731E7B27C598BF1A6EF215072D92E33AD07B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_630cb257bdee13b8ea337d7f40367af7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_630cb257bdee13b8ea337d7f40367af7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_630cb257bdee13b8ea337d7f40367af7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 9.3MB
- SHA256 4beb88ce4fa2cbbe293280ad6263579e420c2e0598a1cf093af352ba4dea2d69
- MD5 630cb257bdee13b8ea337d7f40367af7
- SHA1 56f38e7655b0790923e6a5f8ed796f0e8745ea0b
- SHA512 2f337a809d22e19ae22491494b11d1dce726818ebb6e2159a90f4a92e49e062209e792f2780e180f42ed1b53dbee7dab696280010c91052705362623ad7d1637
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmQ+WQtZ/K0tGOFWVRuLftCT:JtcIkGn4WyZ/K0ttYVAAT
- TLSH T144A66C13B2E540A8D1AAD134CF668731E7B27C598BF1A6EF215072D92E33AD07B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry