General
- Target 2026-08-27_615f151a1d83046ec5bbcfd01c32f8a0_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 3.4MB
- Sample260827-ty57eabm4z
- SHA256 438e7206b0c12a0c8707f728495c26334d6cd087bb16411868a2ce78b97568cc
- MD5 615f151a1d83046ec5bbcfd01c32f8a0
- SHA1 0af5bf27ae5ba7c59627dc2fa4b5e2d522d1c175
- SHA512 bcc5e8693ec8edbad4ae105f9072dfd043f0bf0c69f735f05ef56f281a56cfb2a12eb315f2fd1ce5c6b2bffaaa81eb0def6488aa763308a72e68673f0ec1d7ec
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatgleW1PszNsQ0M56rqTY5X:TID41qW1PszV9W1Pszirqc5X
- TLSH T1FCF57C42B7D54AB2E6771531882752A26E777C101F3087CF1394692E6F33BC0AA3A75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_615f151a1d83046ec5bbcfd01c32f8a0_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_615f151a1d83046ec5bbcfd01c32f8a0_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_615f151a1d83046ec5bbcfd01c32f8a0_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 3.4MB
- SHA256 438e7206b0c12a0c8707f728495c26334d6cd087bb16411868a2ce78b97568cc
- MD5 615f151a1d83046ec5bbcfd01c32f8a0
- SHA1 0af5bf27ae5ba7c59627dc2fa4b5e2d522d1c175
- SHA512 bcc5e8693ec8edbad4ae105f9072dfd043f0bf0c69f735f05ef56f281a56cfb2a12eb315f2fd1ce5c6b2bffaaa81eb0def6488aa763308a72e68673f0ec1d7ec
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglBW1PszNsQ9qatgleW1PszNsQ0M56rqTY5X:TID41qW1PszV9W1Pszirqc5X
- TLSH T1FCF57C42B7D54AB2E6771531882752A26E777C101F3087CF1394692E6F33BC0AA3A75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory