General
- Target 2026-09-07_6f953b817e77ed0e10ad55cb6bd74e1f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 9.4MB
- Sample260908-3ddfbsygrc
- SHA256 0eccbc54c93d4f48b82eba8566a6c01779403289fa56eb7a7c03c1af214dd52a
- MD5 6f953b817e77ed0e10ad55cb6bd74e1f
- SHA1 f4f45276a7a63a4d0d84f0b4cdbc40666d5fa380
- SHA512 cdcb26e03f23f1e269440c4963c035ffb77ff8bb955585472cea3c5b18599afa8f7b2570799f19538539de261d7f308e14748e1c914b0b4f0fb30a6569f06e97
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nEe5x6c1QVb6nUm8oe5x6c1QVb6nYC/h1+vm:l8Vb618L8Vb6H8Vb618L8Vb6YC/h1+vm
- TLSH T11EA69D17F6A440F5D17AD53486A69732EB72B8120B319BCF4394C6192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_6f953b817e77ed0e10ad55cb6bd74e1f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_6f953b817e77ed0e10ad55cb6bd74e1f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_6f953b817e77ed0e10ad55cb6bd74e1f_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 9.4MB
- SHA256 0eccbc54c93d4f48b82eba8566a6c01779403289fa56eb7a7c03c1af214dd52a
- MD5 6f953b817e77ed0e10ad55cb6bd74e1f
- SHA1 f4f45276a7a63a4d0d84f0b4cdbc40666d5fa380
- SHA512 cdcb26e03f23f1e269440c4963c035ffb77ff8bb955585472cea3c5b18599afa8f7b2570799f19538539de261d7f308e14748e1c914b0b4f0fb30a6569f06e97
- SSDEEP 98304:+e5x6c1QVb6nUm8oe5x6c1QVb6nEe5x6c1QVb6nUm8oe5x6c1QVb6nYC/h1+vm:l8Vb618L8Vb6H8Vb618L8Vb6YC/h1+vm
- TLSH T11EA69D17F6A440F5D17AD53486A69732EB72B8120B319BCF4394C6192F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry