General
- Target 2026-08-30_c8c327ada3c8b63d82ed6766727dd5ff_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 3.2MB
- Sample260831-e8w9xsdk8y
- SHA256 e4913788881c833ea222f771102d21544b03cd887d84d02082e07deb7c82c658
- MD5 c8c327ada3c8b63d82ed6766727dd5ff
- SHA1 0c7ed3ad15f987845883a26d7d3e36f9a5d8a9f1
- SHA512 038fdbb20fb77ecf377d75ae2c30f4fc879c9a345b2aa6f98c863a597405df3441e3274a942d065e89e19fcdb89670dc2446c33aa43d0d5ce3864bb7427b5c55
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglujwq512oy6i1zuajsauZnJPqatgl6:TID41vZ3tLP
- TLSH T148E59D5577E448B2E1B70232897652525E72B8311F25E2CF23A4937D6F337C0AB36B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_c8c327ada3c8b63d82ed6766727dd5ff_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_c8c327ada3c8b63d82ed6766727dd5ff_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_c8c327ada3c8b63d82ed6766727dd5ff_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 3.2MB
- SHA256 e4913788881c833ea222f771102d21544b03cd887d84d02082e07deb7c82c658
- MD5 c8c327ada3c8b63d82ed6766727dd5ff
- SHA1 0c7ed3ad15f987845883a26d7d3e36f9a5d8a9f1
- SHA512 038fdbb20fb77ecf377d75ae2c30f4fc879c9a345b2aa6f98c863a597405df3441e3274a942d065e89e19fcdb89670dc2446c33aa43d0d5ce3864bb7427b5c55
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatglujwq512oy6i1zuajsauZnJPqatgl6:TID41vZ3tLP
- TLSH T148E59D5577E448B2E1B70232897652525E72B8311F25E2CF23A4937D6F337C0AB36B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory