General
- Target 2026-08-24_06699aa444c3efab6ee744d5f7a6c678_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 8.6MB
- Sample260825-ymdp8saf95
- SHA256 c82e8e100d0a8afc644e1aadb56a3d31c89e858b5d9e309df2e88f8b3a786eb6
- MD5 06699aa444c3efab6ee744d5f7a6c678
- SHA1 2849602bbfe7442fe19f8f28689c416f1dc6bc51
- SHA512 a1c6be909c778b2410db0052781cac2f75a87d1c2d62d7626679971658cc0baf85be934a6e25b387130cd66e0859896c31b60a1bdc41e79a14dcc4148164b31a
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz4TvUko/Sz6j0I8Ni8:IkQk1To/Eq088
- TLSH T1B6969F6AB6D900F6C17194B0C82617B5E2B2F81143318BCB53E8DE1E2E3BBD45E39765
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_06699aa444c3efab6ee744d5f7a6c678_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_06699aa444c3efab6ee744d5f7a6c678_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_06699aa444c3efab6ee744d5f7a6c678_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 8.6MB
- SHA256 c82e8e100d0a8afc644e1aadb56a3d31c89e858b5d9e309df2e88f8b3a786eb6
- MD5 06699aa444c3efab6ee744d5f7a6c678
- SHA1 2849602bbfe7442fe19f8f28689c416f1dc6bc51
- SHA512 a1c6be909c778b2410db0052781cac2f75a87d1c2d62d7626679971658cc0baf85be934a6e25b387130cd66e0859896c31b60a1bdc41e79a14dcc4148164b31a
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz4TvUko/Sz6j0I8Ni8:IkQk1To/Eq088
- TLSH T1B6969F6AB6D900F6C17194B0C82617B5E2B2F81143318BCB53E8DE1E2E3BBD45E39765
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry