General
- Target 2026-08-28_2657e53745f874b09bd8e9046d8cad18_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_vidar
- Size 8.0MB
- Sample260828-ys84bsswe1
- SHA256 e683a29cc82196f2dd844a0fc6587bd62cc522f5d1e36ee2a29de4ae46be550c
- MD5 2657e53745f874b09bd8e9046d8cad18
- SHA1 4b2a72b06ab649036a2140f4ed7f49ca64964a40
- SHA512 790451a80b923a65a89651ceb01713f9438be959a2d2857e7ceb786f455245f2ec53d40000dd2d960363b22afeee341631813abf14a108070d8f5f880863ce96
- SSDEEP 196608:njBxcO4ONmq7CtF52S9+ULdNPtbuPZOBW0:XN7uF52SlLdNPt6RO80
- TLSH T10986CF22F7D4847AE42B50734638A6318979F865073597CF13C49A19FF36AC2AF36392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_2657e53745f874b09bd8e9046d8cad18_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-st.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_2657e53745f874b09bd8e9046d8cad18_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-st.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_2657e53745f874b09bd8e9046d8cad18_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_vidar
- Size 8.0MB
- SHA256 e683a29cc82196f2dd844a0fc6587bd62cc522f5d1e36ee2a29de4ae46be550c
- MD5 2657e53745f874b09bd8e9046d8cad18
- SHA1 4b2a72b06ab649036a2140f4ed7f49ca64964a40
- SHA512 790451a80b923a65a89651ceb01713f9438be959a2d2857e7ceb786f455245f2ec53d40000dd2d960363b22afeee341631813abf14a108070d8f5f880863ce96
- SSDEEP 196608:njBxcO4ONmq7CtF52S9+ULdNPtbuPZOBW0:XN7uF52SlLdNPt6RO80
- TLSH T10986CF22F7D4847AE42B50734638A6318979F865073597CF13C49A19FF36AC2AF36392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory