General
- Target 2026-09-04_2b764c3b9a2ace65a080f1a7677f26e7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.9MB
- Sample260905-s1ypnsxerc
- SHA256 5f90095c7ac47e6e5972276c84806dd08f7957f616564816852c966e0afa16ba
- MD5 2b764c3b9a2ace65a080f1a7677f26e7
- SHA1 7f61f1d86bbfd1552d5d1edda36ea7893aa4ce62
- SHA512 103b8234a66d1dd351723d27079c05a43e7f3fc71965bdcd3b0dee6849c539a8079a41f2d1f50ad7ba632bc24ae8ba8f476817224d0b0e5aa9084bd46cf465d3
- SSDEEP 98304:Pe5x6c1/e5x6c1Mpoq2Vjnm/e5x6c1/e5x6c1Mpoq2VjnmwZLapI9:IkopGnxkopGnhZcI9
- TLSH T1ADB68D16B2E440F5C2A69534CB578636E371BC154BB0D7EF6254EA8D2E336D0BE3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_2b764c3b9a2ace65a080f1a7677f26e7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_2b764c3b9a2ace65a080f1a7677f26e7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_2b764c3b9a2ace65a080f1a7677f26e7_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 10.9MB
- SHA256 5f90095c7ac47e6e5972276c84806dd08f7957f616564816852c966e0afa16ba
- MD5 2b764c3b9a2ace65a080f1a7677f26e7
- SHA1 7f61f1d86bbfd1552d5d1edda36ea7893aa4ce62
- SHA512 103b8234a66d1dd351723d27079c05a43e7f3fc71965bdcd3b0dee6849c539a8079a41f2d1f50ad7ba632bc24ae8ba8f476817224d0b0e5aa9084bd46cf465d3
- SSDEEP 98304:Pe5x6c1/e5x6c1Mpoq2Vjnm/e5x6c1/e5x6c1Mpoq2VjnmwZLapI9:IkopGnxkopGnhZcI9
- TLSH T1ADB68D16B2E440F5C2A69534CB578636E371BC154BB0D7EF6254EA8D2E336D0BE3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry