General
- Target 2026-09-26_57e54aa6ea0549c63fa0d774c940e2b9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_remcos_stealc_vidar
- Size 16.1MB
- Sample260926-2ekqcsvxdx
- SHA256 73fba25d6e684212e6f270cf5181df4b804c485aa8d2c4c34503e0d5fef536d8
- MD5 57e54aa6ea0549c63fa0d774c940e2b9
- SHA1 b7e55976f00e32e44d3738eda1692b302a28fb2d
- SHA512 a0aff782535981c409e47bc85e20e6ca738ddb54b69a37b6fcae65ea64e5544b568df00856184ab0cd1a19c9929d2aecae1c095d2194ade484d1044679320235
- SSDEEP 196608:LN1e7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTouCgZ2ji:XeahvQHrc8u3xXJ/f4uUWHi2W
- TLSH T105079D13B35681E6C02AD2B88A474322E7B9BC440334A7DB16D5BB692F77BE4573B350
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-09-26_57e54aa6ea0549c63fa0d774c940e2b9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-26_57e54aa6ea0549c63fa0d774c940e2b9_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_remcos_stealc_vidar
- Size 16.1MB
- SHA256 73fba25d6e684212e6f270cf5181df4b804c485aa8d2c4c34503e0d5fef536d8
- MD5 57e54aa6ea0549c63fa0d774c940e2b9
- SHA1 b7e55976f00e32e44d3738eda1692b302a28fb2d
- SHA512 a0aff782535981c409e47bc85e20e6ca738ddb54b69a37b6fcae65ea64e5544b568df00856184ab0cd1a19c9929d2aecae1c095d2194ade484d1044679320235
- SSDEEP 196608:LN1e7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTouCgZ2ji:XeahvQHrc8u3xXJ/f4uUWHi2W
- TLSH T105079D13B35681E6C02AD2B88A474322E7B9BC440334A7DB16D5BB692F77BE4573B350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.