General
- Target 2026-08-23_b0cfa2309c4a5d1fbcfdb5f8c96e4ddf_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.9MB
- Sample260825-2jtttsbb24
- SHA256 684571aa9c50d7c09ac97b07dd39671c260efa87b7ffceef1672b2ab1ddf8b9b
- MD5 b0cfa2309c4a5d1fbcfdb5f8c96e4ddf
- SHA1 9d4cd852934136f815ff8983e5d5c00e6513d40d
- SHA512 aae0a47179a2f2cac6f19da1c77be1f1fb64353523e70cae5a876516665c290c87b678a21bf0bc6eaf56aabf48f018d8172f018afcc071551c9f2dcf9209afca
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmQ+WQtZ/K0tGOFWVRuLftCT3LapI9:JtcIkGn4WyZ/K0ttYVAAT3cI9
- TLSH T1CEB65A13B2E540A9D199D134CF668731E7A27C698BF1A6EF314072C92E33AD07B39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_b0cfa2309c4a5d1fbcfdb5f8c96e4ddf_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_b0cfa2309c4a5d1fbcfdb5f8c96e4ddf_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_b0cfa2309c4a5d1fbcfdb5f8c96e4ddf_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.9MB
- SHA256 684571aa9c50d7c09ac97b07dd39671c260efa87b7ffceef1672b2ab1ddf8b9b
- MD5 b0cfa2309c4a5d1fbcfdb5f8c96e4ddf
- SHA1 9d4cd852934136f815ff8983e5d5c00e6513d40d
- SHA512 aae0a47179a2f2cac6f19da1c77be1f1fb64353523e70cae5a876516665c290c87b678a21bf0bc6eaf56aabf48f018d8172f018afcc071551c9f2dcf9209afca
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmQ+WQtZ/K0tGOFWVRuLftCT3LapI9:JtcIkGn4WyZ/K0ttYVAAT3cI9
- TLSH T1CEB65A13B2E540A9D199D134CF668731E7A27C698BF1A6EF314072C92E33AD07B39716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry