General
- Target 2026-09-30_0a141d45411d486e11e70b685f5f7fa3_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_smoke-loader_stealc_vidar
- Size 16.3MB
- Sample261001-xrpgvszzft
- SHA256 95fe7064106ad6a587b506b86b2588a3e6fbb56f88886a76d6f204cad01f05dd
- MD5 0a141d45411d486e11e70b685f5f7fa3
- SHA1 dc1681a8aa7958780a238abec3b7bb6e5a1661c7
- SHA512 d795646d7eda1ac0df90eb50294636c2c02a5bc6d6c7c44aefa3f9bcbd2ce343263ed8174f3373256b7f0289a77541e21ca22f82d145d4478b1d383a12a305bb
- SSDEEP 196608:AN2njte7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTou4PJ:JjteahvQHrc8u3xXJ/f4uUWHv
- TLSH T1F6079D13B34681E6C06AD2B89A474226E7B6BC440330A7DB16D5FB292F77BE4573B350
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-09-30_0a141d45411d486e11e70b685f5f7fa3_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_0a141d45411d486e11e70b685f5f7fa3_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_quasar-rat_smoke-loader_stealc_vidar
- Size 16.3MB
- SHA256 95fe7064106ad6a587b506b86b2588a3e6fbb56f88886a76d6f204cad01f05dd
- MD5 0a141d45411d486e11e70b685f5f7fa3
- SHA1 dc1681a8aa7958780a238abec3b7bb6e5a1661c7
- SHA512 d795646d7eda1ac0df90eb50294636c2c02a5bc6d6c7c44aefa3f9bcbd2ce343263ed8174f3373256b7f0289a77541e21ca22f82d145d4478b1d383a12a305bb
- SSDEEP 196608:AN2njte7APhNNECwHrc8u3x3AEcq/fByuKlWH3CTou4PJ:JjteahvQHrc8u3xXJ/f4uUWHv
- TLSH T1F6079D13B34681E6C06AD2B89A474226E7B6BC440330A7DB16D5FB292F77BE4573B350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with Dotfuscator
-
Detects executables packed with SmartAssembly
-
Detects executables packed with Yano Obfuscator
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.