General
- Target 2026-08-24_04e5e85f3725dac6521d6493d10b4355_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 8.6MB
- Sample260825-yrvvbaycrd
- SHA256 1b86f2190224ec1e10e8e700284654f0072cb34bcc892a5b5bbc687d5e647dd1
- MD5 04e5e85f3725dac6521d6493d10b4355
- SHA1 dbe139a941d67a792313edea3e6af5475015c256
- SHA512 86efd319cd9f0621c9f7b8c99d4a6e53dd7b885d38ea07415543573c9d36dc843a5d20372608ea2671357023a52a8dc89c9956399ec9e5c9173b26b50687607b
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2Vjnmylhx0z:IkQkjGnXTKz
- TLSH T1E1969D12B6E540F5C1AA85309B679732E6B1BC154B30D7DB8354FB192F336D0AE3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_04e5e85f3725dac6521d6493d10b4355_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_04e5e85f3725dac6521d6493d10b4355_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_04e5e85f3725dac6521d6493d10b4355_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 8.6MB
- SHA256 1b86f2190224ec1e10e8e700284654f0072cb34bcc892a5b5bbc687d5e647dd1
- MD5 04e5e85f3725dac6521d6493d10b4355
- SHA1 dbe139a941d67a792313edea3e6af5475015c256
- SHA512 86efd319cd9f0621c9f7b8c99d4a6e53dd7b885d38ea07415543573c9d36dc843a5d20372608ea2671357023a52a8dc89c9956399ec9e5c9173b26b50687607b
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2Vjnmylhx0z:IkQkjGnXTKz
- TLSH T1E1969D12B6E540F5C1AA85309B679732E6B1BC154B30D7DB8354FB192F336D0AE3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry