General
- Target 2026-08-22_7cf8eb4934c7cfa1c303a0072b68373c_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar
- Size 5.3MB
- Sample260823-gss9faen2t
- SHA256 6c76b8ed451be1ce829863785b87c88d29dc122c5476c88e30ba453533871dcd
- MD5 7cf8eb4934c7cfa1c303a0072b68373c
- SHA1 4acf14da4bbe5eda80767e6dea6206a2663562e6
- SHA512 683c348741913d4895a68e3cce9a60870480de60aa9d83b9c43f599abb9a995c0731576d35489066d56d812f90a71671bc996a37fbd4d393a96b473eee74058a
- SSDEEP 98304:njBxcO4EYljer61yjer61yjer61yjer61yjer5:njBxcO4Vjm6Ujm6Ujm6Ujm6Ujm5
- TLSH T11C467D21B7E441B9E4B396718AB9A722D7B5B9A00B3087CF5385869D1F32BD0CD35732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_7cf8eb4934c7cfa1c303a0072b68373c_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_7cf8eb4934c7cfa1c303a0072b68373c_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_7cf8eb4934c7cfa1c303a0072b68373c_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar
- Size 5.3MB
- SHA256 6c76b8ed451be1ce829863785b87c88d29dc122c5476c88e30ba453533871dcd
- MD5 7cf8eb4934c7cfa1c303a0072b68373c
- SHA1 4acf14da4bbe5eda80767e6dea6206a2663562e6
- SHA512 683c348741913d4895a68e3cce9a60870480de60aa9d83b9c43f599abb9a995c0731576d35489066d56d812f90a71671bc996a37fbd4d393a96b473eee74058a
- SSDEEP 98304:njBxcO4EYljer61yjer61yjer61yjer61yjer5:njBxcO4Vjm6Ujm6Ujm6Ujm6Ujm5
- TLSH T11C467D21B7E441B9E4B396718AB9A722D7B5B9A00B3087CF5385869D1F32BD0CD35732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory