General
- Target 2026-08-28_bb1a3927de5f55000da19a9df7d560ab_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar
- Size 5.4MB
- Sample260828-lmbveswcla
- SHA256 22c4e8db9ed58feb87b7bcbc863ddc3bb22c3df9d2a5bbceb87469d59ad52aae
- MD5 bb1a3927de5f55000da19a9df7d560ab
- SHA1 aca15e4933d55a3f03e85ebf67e43c8d6b2b7fbc
- SHA512 5aa3efa866dd85e9707a206eb38b67f0a505ea481d007678f075c7412be1637c293698aea7ced6eb8dc5ae77491007d74e83d01cc486b21bdafdbc9b03deca82
- SSDEEP 49152:nj9LxcO4Q5YbKzT2bXNPFqKzT2bXNPFqKzT2bXNPFqKzT2bQVO88hXl+OoQF7G:njBxcO4EY+21f21f21fs/h1+oA
- TLSH T15B466A21B2E4C134E4B72175C9ADA6B1967DBC208B2187CF72447E6DBE31BC18E35366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_bb1a3927de5f55000da19a9df7d560ab_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_bb1a3927de5f55000da19a9df7d560ab_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_bb1a3927de5f55000da19a9df7d560ab_amadey_cobalt-strike_elex_glassworm_hijackloader_smoke-loader_vidar
- Size 5.4MB
- SHA256 22c4e8db9ed58feb87b7bcbc863ddc3bb22c3df9d2a5bbceb87469d59ad52aae
- MD5 bb1a3927de5f55000da19a9df7d560ab
- SHA1 aca15e4933d55a3f03e85ebf67e43c8d6b2b7fbc
- SHA512 5aa3efa866dd85e9707a206eb38b67f0a505ea481d007678f075c7412be1637c293698aea7ced6eb8dc5ae77491007d74e83d01cc486b21bdafdbc9b03deca82
- SSDEEP 49152:nj9LxcO4Q5YbKzT2bXNPFqKzT2bXNPFqKzT2bXNPFqKzT2bQVO88hXl+OoQF7G:njBxcO4EY+21f21f21fs/h1+oA
- TLSH T15B466A21B2E4C134E4B72175C9ADA6B1967DBC208B2187CF72447E6DBE31BC18E35366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory