General
- Target 2026-08-28_01e51ed3b6af2d4cff99bd38f50fa164_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 3.3MB
- Sample260828-3gl7mstyct
- SHA256 caaa21c8d1eeb0fd4851dc58412b41ff761620f1aa0965e87dd4739b886c863c
- MD5 01e51ed3b6af2d4cff99bd38f50fa164
- SHA1 f112cfc8236525cf2d945b23e293198e28485570
- SHA512 b0cae4cb3de70f580301825547dd342aee3ebc8b4ae7ef0a0d86be61804c26bc9dff3117fe708e2e7800516c0eb06a8d8819fc8f43704dede7834d3cd5f3e729
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglmNY5CBFXpV56rNLeW4SkZP4sz9Mb:TID41m5CQrJfkZc
- TLSH T174F55B56B7A88B72D0B78175C4979696BE723C111F2087CF1344AB2C2F337D1AA36726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_01e51ed3b6af2d4cff99bd38f50fa164_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_01e51ed3b6af2d4cff99bd38f50fa164_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_01e51ed3b6af2d4cff99bd38f50fa164_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 3.3MB
- SHA256 caaa21c8d1eeb0fd4851dc58412b41ff761620f1aa0965e87dd4739b886c863c
- MD5 01e51ed3b6af2d4cff99bd38f50fa164
- SHA1 f112cfc8236525cf2d945b23e293198e28485570
- SHA512 b0cae4cb3de70f580301825547dd342aee3ebc8b4ae7ef0a0d86be61804c26bc9dff3117fe708e2e7800516c0eb06a8d8819fc8f43704dede7834d3cd5f3e729
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglmNY5CBFXpV56rNLeW4SkZP4sz9Mb:TID41m5CQrJfkZc
- TLSH T174F55B56B7A88B72D0B78175C4979696BE723C111F2087CF1344AB2C2F337D1AA36726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory