General
- Target 2026-09-16_61c601083ea96d4de4ef87b3315d6ccb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 20.6MB
- Sample260916-pdhs6abj2t
- SHA256 aaa977f2f2f24fdece540342b08124b6360230b75174120e939c44c631df8686
- MD5 61c601083ea96d4de4ef87b3315d6ccb
- SHA1 9149edd68c683cbfbe5fc0e6dbbc5e690acf2867
- SHA512 d5f28a5aaeeb5aa07c39e4de2fb28ac7b6b68773a39e1e713b409ff3b18507d3b5e149c586618acb07f38480629c33f690cc25ba5b2d66128bc4d52777bf1cad
- SSDEEP 196608:Ikakyn718UzsWyZ/K0ttYVAATdkakyn718UzsWyZ/K0ttYVAATN:C5zyZ/K0ttYZTp5zyZ/K0ttYZTN
- TLSH T1EA277C03F6D540F9E16A9134CA669732EB32BC164BB196DF2250F6981E336D07F39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_61c601083ea96d4de4ef87b3315d6ccb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_61c601083ea96d4de4ef87b3315d6ccb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_61c601083ea96d4de4ef87b3315d6ccb_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 20.6MB
- SHA256 aaa977f2f2f24fdece540342b08124b6360230b75174120e939c44c631df8686
- MD5 61c601083ea96d4de4ef87b3315d6ccb
- SHA1 9149edd68c683cbfbe5fc0e6dbbc5e690acf2867
- SHA512 d5f28a5aaeeb5aa07c39e4de2fb28ac7b6b68773a39e1e713b409ff3b18507d3b5e149c586618acb07f38480629c33f690cc25ba5b2d66128bc4d52777bf1cad
- SSDEEP 196608:Ikakyn718UzsWyZ/K0ttYVAATdkakyn718UzsWyZ/K0ttYVAATN:C5zyZ/K0ttYZTp5zyZ/K0ttYZTN
- TLSH T1EA277C03F6D540F9E16A9134CA669732EB32BC164BB196DF2250F6981E336D07F39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application