General
- Target 2026-09-30_428ea68139ed886a196084d78de8e7cd_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_vidar
- Size 15.0MB
- Sample261001-swsmvsfb75
- SHA256 fd5924bd802832941d944d82e88b82adb8be733c2ba46d09be3276ae0e464035
- MD5 428ea68139ed886a196084d78de8e7cd
- SHA1 eabf5f6b3e3fb4e71b978ba94024056a9280c743
- SHA512 9fffa65c29492a1a2c8f23a056957a1cfc2e12dfbfdc78e56af62f0ae6eb34b964352b872f606bfe7dcfa77c2c89f32f2dcb1153276c7abb21a6345fdee2d662
- SSDEEP 393216:XN7uFwyZ/K0ttYZT8N7uFwyZ/K0ttYZTf:XNSwyZ/K0ttYZT8NSwyZ/K0ttYZTf
- TLSH T102F69D13F58940B9D06AC075CA6AA631D731BC590BF265DF23807AE82F37AD1BB39351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_428ea68139ed886a196084d78de8e7cd_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_428ea68139ed886a196084d78de8e7cd_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_428ea68139ed886a196084d78de8e7cd_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_vidar
- Size 15.0MB
- SHA256 fd5924bd802832941d944d82e88b82adb8be733c2ba46d09be3276ae0e464035
- MD5 428ea68139ed886a196084d78de8e7cd
- SHA1 eabf5f6b3e3fb4e71b978ba94024056a9280c743
- SHA512 9fffa65c29492a1a2c8f23a056957a1cfc2e12dfbfdc78e56af62f0ae6eb34b964352b872f606bfe7dcfa77c2c89f32f2dcb1153276c7abb21a6345fdee2d662
- SSDEEP 393216:XN7uFwyZ/K0ttYZT8N7uFwyZ/K0ttYZTf:XNSwyZ/K0ttYZT8NSwyZ/K0ttYZTf
- TLSH T102F69D13F58940B9D06AC075CA6AA631D731BC590BF265DF23807AE82F37AD1BB39351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory