General
- Target 2026-09-06_7bcc9edc1472d86dd5032c8c36da10b6_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_stealc_vidar
- Size 15.5MB
- Sample260907-althasdh59
- SHA256 6e21c47dbc6e8c3c28703be8ab07e6efb5a6a3e725c221fdf56c7f651c176217
- MD5 7bcc9edc1472d86dd5032c8c36da10b6
- SHA1 aea45064a5e1ec012c53bbc6b1037c29cd059abd
- SHA512 6f2e412c9f0fc1c0abece0c182eaa26ef1e9cc571b02f6dd449ddbd7dc3768e30e4f41e7d64846a1a80c6500dcfb00bc9b2c61203037ece07b544da788b1010c
- SSDEEP 196608:6NyV7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTouC:rahvQHrc8u3xXJ/f4uUWHl
- TLSH T196F69D17B35681E6C02AE2B88A474323E7B5BC440330A7DB16D5BB692F77BE4573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-09-06_7bcc9edc1472d86dd5032c8c36da10b6_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_7bcc9edc1472d86dd5032c8c36da10b6_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_7bcc9edc1472d86dd5032c8c36da10b6_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_stealc_vidar
- Size 15.5MB
- SHA256 6e21c47dbc6e8c3c28703be8ab07e6efb5a6a3e725c221fdf56c7f651c176217
- MD5 7bcc9edc1472d86dd5032c8c36da10b6
- SHA1 aea45064a5e1ec012c53bbc6b1037c29cd059abd
- SHA512 6f2e412c9f0fc1c0abece0c182eaa26ef1e9cc571b02f6dd449ddbd7dc3768e30e4f41e7d64846a1a80c6500dcfb00bc9b2c61203037ece07b544da788b1010c
- SSDEEP 196608:6NyV7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTouC:rahvQHrc8u3xXJ/f4uUWHl
- TLSH T196F69D17B35681E6C02AE2B88A474323E7B5BC440330A7DB16D5BB692F77BE4573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Detects executables packed with SmartAssembly
-
Detects executables packed with Yano Obfuscator
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.