General
- Target 2026-08-24_dc409fd02693626170bc6aad2d298329_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar_wannacry
- Size 15.3MB
- Sample260824-2tr3zsfc97
- SHA256 426a57078d776db9c93555da21271b7209894a46796b65d2f0f69c9d9923db0a
- MD5 dc409fd02693626170bc6aad2d298329
- SHA1 0db85e96be3db28ddaf58beec18bc307de0422da
- SHA512 d192470461e4287e845b6fce9ca2b3dc87b1a5c3716e67b944b19b45bc2e26d2fed16256c39472398e25c79f47fd27f9501ab610da58e74018370add6fe68a69
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2VjnmDte5x6c1/e5x6c1ze5x6c1/e53:IkQkjGnKikQkjGnKt
- TLSH T1FCF68C06B6A480F5D2A6863455B79776F771BC050B20DBDF9364DB192E337C0AE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_dc409fd02693626170bc6aad2d298329_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_dc409fd02693626170bc6aad2d298329_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_dc409fd02693626170bc6aad2d298329_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar_wannacry
- Size 15.3MB
- SHA256 426a57078d776db9c93555da21271b7209894a46796b65d2f0f69c9d9923db0a
- MD5 dc409fd02693626170bc6aad2d298329
- SHA1 0db85e96be3db28ddaf58beec18bc307de0422da
- SHA512 d192470461e4287e845b6fce9ca2b3dc87b1a5c3716e67b944b19b45bc2e26d2fed16256c39472398e25c79f47fd27f9501ab610da58e74018370add6fe68a69
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2VjnmDte5x6c1/e5x6c1ze5x6c1/e53:IkQkjGnKikQkjGnKt
- TLSH T1FCF68C06B6A480F5D2A6863455B79776F771BC050B20DBDF9364DB192E337C0AE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry