General
- Target 2026-08-24_b8d172d902cbe433aa1561485c0142a1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar_wannacry
- Size 14.2MB
- Sample260825-dhhs6swdrh
- SHA256 e8749ae2abe6a308db135c117abb8d81acdc567f4d72e45fd5ecaae2c93aadcb
- MD5 b8d172d902cbe433aa1561485c0142a1
- SHA1 8287d2a6e7961e998ea196ef1755d083a2d48062
- SHA512 4d8e335d15bbcd591f39300efff024e62b0bd9f3298da7488f710d025cff21a5e4810a0b7d6a07e8a1b6f887ba132ebcd0dae7891b256c9d31b850aa4a4e2ea4
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2Vjnm/e5x6c1/e5x6c1ze5x6c1/e5xy:IkQkjGnxkQkjGnhD
- TLSH T131E69E06B69480F5D2A6863055BA9777F771B8054B30DBDF8364CA2D2E337C09E3A366
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_b8d172d902cbe433aa1561485c0142a1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_b8d172d902cbe433aa1561485c0142a1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_b8d172d902cbe433aa1561485c0142a1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar_wannacry
- Size 14.2MB
- SHA256 e8749ae2abe6a308db135c117abb8d81acdc567f4d72e45fd5ecaae2c93aadcb
- MD5 b8d172d902cbe433aa1561485c0142a1
- SHA1 8287d2a6e7961e998ea196ef1755d083a2d48062
- SHA512 4d8e335d15bbcd591f39300efff024e62b0bd9f3298da7488f710d025cff21a5e4810a0b7d6a07e8a1b6f887ba132ebcd0dae7891b256c9d31b850aa4a4e2ea4
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2Vjnm/e5x6c1/e5x6c1ze5x6c1/e5xy:IkQkjGnxkQkjGnhD
- TLSH T131E69E06B69480F5D2A6863055BA9777F771B8054B30DBDF8364CA2D2E337C09E3A366
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry