General
- Target 2026-08-27_a57424e32a8be1fd6d243b9297d3923f_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 3.6MB
- Sample260827-nbpcgshc78
- SHA256 637ab4e1d738e276defd842102068e8b7f49a7121279135705beb8f4e2b657f1
- MD5 a57424e32a8be1fd6d243b9297d3923f
- SHA1 f2820f39d5d06b6e32e5588ba3d5676990505862
- SHA512 1b6a186c520d7625df3935f91247cf98b1cab86888cf1886f4af1024386b0a97172534ff5002c20d8983530a4e8b51931d1a6b2f3c9aa95a3cfca47ad5a180b3
- SSDEEP 98304:TID41qW1Pszj5xsNMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMMMqNMMzMMMUMj:TuqxsH5xs
- TLSH T1B0067D52F7E554A1E1B7253185278261AA72FC110B30869F33987B2E2F337D1FA3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_a57424e32a8be1fd6d243b9297d3923f_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_a57424e32a8be1fd6d243b9297d3923f_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_a57424e32a8be1fd6d243b9297d3923f_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 3.6MB
- SHA256 637ab4e1d738e276defd842102068e8b7f49a7121279135705beb8f4e2b657f1
- MD5 a57424e32a8be1fd6d243b9297d3923f
- SHA1 f2820f39d5d06b6e32e5588ba3d5676990505862
- SHA512 1b6a186c520d7625df3935f91247cf98b1cab86888cf1886f4af1024386b0a97172534ff5002c20d8983530a4e8b51931d1a6b2f3c9aa95a3cfca47ad5a180b3
- SSDEEP 98304:TID41qW1Pszj5xsNMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMMMqNMMzMMMUMj:TuqxsH5xs
- TLSH T1B0067D52F7E554A1E1B7253185278261AA72FC110B30869F33987B2E2F337D1FA3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory