General
- Target 2026-08-24_4af0ef6c669f3315db630c88bba1fd77_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar_wannacry
- Size 15.0MB
- Sample260825-q7kehsap7v
- SHA256 850588afb5a78f6395ec448f6af2e9f1c488940c8441d99f48f685fd4b1bcf06
- MD5 4af0ef6c669f3315db630c88bba1fd77
- SHA1 b11fe21e51dcd84325f95a055f0ca98cc3e53944
- SHA512 3082542796fc6b47578156d36f47bf160c0c6dceb22653e533f3b2aa15cae883e13da6a20d74ada82d0d8eb2539540dfacc0263bc462a11534fc34f48482a031
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2VjnmDte5x6c1/e5x6c1ze5x6c1/e5W:IkQkjGnKikQkjGnKuD
- TLSH T1D9F68C06B6A480F5D2A6863445B79677F671BC054B30DBDF9364DB192E337C0AE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_4af0ef6c669f3315db630c88bba1fd77_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_4af0ef6c669f3315db630c88bba1fd77_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_4af0ef6c669f3315db630c88bba1fd77_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar_wannacry
- Size 15.0MB
- SHA256 850588afb5a78f6395ec448f6af2e9f1c488940c8441d99f48f685fd4b1bcf06
- MD5 4af0ef6c669f3315db630c88bba1fd77
- SHA1 b11fe21e51dcd84325f95a055f0ca98cc3e53944
- SHA512 3082542796fc6b47578156d36f47bf160c0c6dceb22653e533f3b2aa15cae883e13da6a20d74ada82d0d8eb2539540dfacc0263bc462a11534fc34f48482a031
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2VjnmDte5x6c1/e5x6c1ze5x6c1/e5W:IkQkjGnKikQkjGnKuD
- TLSH T1D9F68C06B6A480F5D2A6863445B79677F671BC054B30DBDF9364DB192E337C0AE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry