General
- Target 2026-08-24_04c373a3011305287ac7d9f2735aea18_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar_wannacry
- Size 14.2MB
- Sample260825-ysp1fsvwhy
- SHA256 58068be829d79a10723f2520912dc2f32dee5055866f2c631399486a4835949e
- MD5 04c373a3011305287ac7d9f2735aea18
- SHA1 2fed46edf1aa84018d81cb8d5f3ae2dd349efb38
- SHA512 734718ddc068823dbfb73482b21954415af0c50d38069a1d2bdb9589485696097357b369c5cbc27af950228a20899efa797ddde16fdd4c1914e2c931f1cc1fc3
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2Vjnm/e5x6c1/e5x6c1ze5x6c1/e5x7:IkQkjGnxkQkjGn
- TLSH T1DEE69E06B69480F5D2A6863055BA9777F771B8054B30DBDF8364CA2D2E337C09E3A366
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_04c373a3011305287ac7d9f2735aea18_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_04c373a3011305287ac7d9f2735aea18_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_04c373a3011305287ac7d9f2735aea18_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_remcos_vidar_wannacry
- Size 14.2MB
- SHA256 58068be829d79a10723f2520912dc2f32dee5055866f2c631399486a4835949e
- MD5 04c373a3011305287ac7d9f2735aea18
- SHA1 2fed46edf1aa84018d81cb8d5f3ae2dd349efb38
- SHA512 734718ddc068823dbfb73482b21954415af0c50d38069a1d2bdb9589485696097357b369c5cbc27af950228a20899efa797ddde16fdd4c1914e2c931f1cc1fc3
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2Vjnm/e5x6c1/e5x6c1ze5x6c1/e5x7:IkQkjGnxkQkjGn
- TLSH T1DEE69E06B69480F5D2A6863055BA9777F771B8054B30DBDF8364CA2D2E337C09E3A366
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry