General
- Target 2026-08-25_7ebacd02664c99c68af2f037004ea083_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 9.8MB
- Sample260826-ynqfesak61
- SHA256 d7b669adb256c9e0f123fe593c5cc89a92e7575a9a283c15231d90b36c25a0b7
- MD5 7ebacd02664c99c68af2f037004ea083
- SHA1 fe6031fe5783f2cc417083aa263b25e3c3d1d2b6
- SHA512 eda737715c132cdaea3982403fb517d38f63abe5428b0c475d86e4b669fcd5d0e8839e36f9874b646444ca915187a47582a1268d86cd9bbe5305c1ebf7684d88
- SSDEEP 98304:Pe5x6c1/e5x6c1he5x6c1/e5x6c1Wn7nUm8UzRKQvGAdlCEL8c/bRNw5CO:Ikakyn718UzBvyEYc/b3w8O
- TLSH T143A69E12BBE440F5E56A9134897A9676F776BC020B31DBCB4350EA1E2F336D05E39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_7ebacd02664c99c68af2f037004ea083_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_7ebacd02664c99c68af2f037004ea083_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_7ebacd02664c99c68af2f037004ea083_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 9.8MB
- SHA256 d7b669adb256c9e0f123fe593c5cc89a92e7575a9a283c15231d90b36c25a0b7
- MD5 7ebacd02664c99c68af2f037004ea083
- SHA1 fe6031fe5783f2cc417083aa263b25e3c3d1d2b6
- SHA512 eda737715c132cdaea3982403fb517d38f63abe5428b0c475d86e4b669fcd5d0e8839e36f9874b646444ca915187a47582a1268d86cd9bbe5305c1ebf7684d88
- SSDEEP 98304:Pe5x6c1/e5x6c1he5x6c1/e5x6c1Wn7nUm8UzRKQvGAdlCEL8c/bRNw5CO:Ikakyn718UzBvyEYc/b3w8O
- TLSH T143A69E12BBE440F5E56A9134897A9676F776BC020B31DBCB4350EA1E2F336D05E39326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry