General
- Target 2026-08-23_bc9965f8dcafabc8035c632f65667ccb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar
- Size 5.1MB
- Sample260823-25b6xabl2x
- SHA256 9b8ee82a9e7e03ec6e3b2a1812dfa1d567292225275171d3ae2413b50ef1846b
- MD5 bc9965f8dcafabc8035c632f65667ccb
- SHA1 94b351a639be6568af6ad670b181ca942318cf3c
- SHA512 82d410d3c85987625f0eeb866e018cf5ef555d66c815df4e0b3683e900d356b7bc4164dca730da9dbea89c9803e06cac7c94595f2b30d55c8e14ecd377115175
- SSDEEP 98304:njBxcO4EYJ0RUZ/K0tKNhJXKsdnOFWVRuLftCTG:njBxcO4qRUZ/K0t6rXldOYVAATG
- TLSH T13A465C03F6E941F8E0AAD274DE7596319B32BC558BF195DF224072D81E72AD07B38722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_bc9965f8dcafabc8035c632f65667ccb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_bc9965f8dcafabc8035c632f65667ccb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_bc9965f8dcafabc8035c632f65667ccb_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar
- Size 5.1MB
- SHA256 9b8ee82a9e7e03ec6e3b2a1812dfa1d567292225275171d3ae2413b50ef1846b
- MD5 bc9965f8dcafabc8035c632f65667ccb
- SHA1 94b351a639be6568af6ad670b181ca942318cf3c
- SHA512 82d410d3c85987625f0eeb866e018cf5ef555d66c815df4e0b3683e900d356b7bc4164dca730da9dbea89c9803e06cac7c94595f2b30d55c8e14ecd377115175
- SSDEEP 98304:njBxcO4EYJ0RUZ/K0tKNhJXKsdnOFWVRuLftCTG:njBxcO4qRUZ/K0t6rXldOYVAATG
- TLSH T13A465C03F6E941F8E0AAD274DE7596319B32BC558BF195DF224072D81E72AD07B38722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory