General
- Target 2026-08-24_255be20917927add923f00b4f8247ba1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar_wannacry
- Size 14.8MB
- Sample260825-vmp7gsaa88
- SHA256 a126b8810fc7e021df30329406b5e5a0fc2e094c204bcc19873e021533e59358
- MD5 255be20917927add923f00b4f8247ba1
- SHA1 868c305457faea58150bf08b9bb8d59425307e77
- SHA512 3e4b4d7ba94c54a34b508faee774b14fd2a92d77c1be0a75ed1d94bd27f1b158c7919bc58d1d3b456bf78f70dec2f110a59884036a3e92808a7461729e3af501
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2Vjnm/e5x6c1/e5x6c1ze5x6c1/e5xz:IkQkjGnxkQkjGnz/h1+
- TLSH T1EAF69E06B6A480F5D2A6863455B69777F771B8054B30DBDB8364CB2D2E337D09E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_255be20917927add923f00b4f8247ba1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_255be20917927add923f00b4f8247ba1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_255be20917927add923f00b4f8247ba1_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar_wannacry
- Size 14.8MB
- SHA256 a126b8810fc7e021df30329406b5e5a0fc2e094c204bcc19873e021533e59358
- MD5 255be20917927add923f00b4f8247ba1
- SHA1 868c305457faea58150bf08b9bb8d59425307e77
- SHA512 3e4b4d7ba94c54a34b508faee774b14fd2a92d77c1be0a75ed1d94bd27f1b158c7919bc58d1d3b456bf78f70dec2f110a59884036a3e92808a7461729e3af501
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2Vjnm/e5x6c1/e5x6c1ze5x6c1/e5xz:IkQkjGnxkQkjGnz/h1+
- TLSH T1EAF69E06B6A480F5D2A6863455B69777F771B8054B30DBDB8364CB2D2E337D09E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry