General
- Target 2026-08-26_f0a9230d4d631335e1ac588209f52798_amadey_cobalt-strike_elex_glassworm_icedid_remcos_vidar
- Size 4.0MB
- Sample260827-dtb5rsdk2v
- SHA256 e76c7b5331dc3429c49a0ab8df8f5052392d87c4f8708a234e178f39f7e0a417
- MD5 f0a9230d4d631335e1ac588209f52798
- SHA1 294c6997936c2efa9f424c96dcd1d4af07bf2ada
- SHA512 2531faffbd5c839f4afe5fe740e5c8199f3a48684a51ce58f15bb1bf1b431e2d79ef88a023c2f5e9e5273d663d5d734d9f6a0129b0ddb5326901ae2c09b82ee3
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatgl9wqLY5JzHeW4SkZP4sz9c:TID41qW1PszVh5B3fkZc
- TLSH T1D8166B11F7A44672D0B75131C6A262997E3378114B328A8F1384AABDBF737C09A36777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-26_f0a9230d4d631335e1ac588209f52798_amadey_cobalt-strike_elex_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-26_f0a9230d4d631335e1ac588209f52798_amadey_cobalt-strike_elex_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_f0a9230d4d631335e1ac588209f52798_amadey_cobalt-strike_elex_glassworm_icedid_remcos_vidar
- Size 4.0MB
- SHA256 e76c7b5331dc3429c49a0ab8df8f5052392d87c4f8708a234e178f39f7e0a417
- MD5 f0a9230d4d631335e1ac588209f52798
- SHA1 294c6997936c2efa9f424c96dcd1d4af07bf2ada
- SHA512 2531faffbd5c839f4afe5fe740e5c8199f3a48684a51ce58f15bb1bf1b431e2d79ef88a023c2f5e9e5273d663d5d734d9f6a0129b0ddb5326901ae2c09b82ee3
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatgl9wqLY5JzHeW4SkZP4sz9c:TID41qW1PszVh5B3fkZc
- TLSH T1D8166B11F7A44672D0B75131C6A262997E3378114B328A8F1384AABDBF737C09A36777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory