General
- Target 2026-10-02_fea6fdfd325293e5cd9496d71d6d5840_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar
- Size 3.7MB
- Sample261002-1afeeavy9l
- SHA256 1cdbed2d339acf29b2bede9e9e01c40dfe5b248da68983173da637c1148ce155
- MD5 fea6fdfd325293e5cd9496d71d6d5840
- SHA1 059f90f565f1672f62339514d134afe8aa888c88
- SHA512 0d7463b99a8a2cf767557e252b736c5b48414213f9c399e6da1bc4a8660666b43f18e8184b2fde002fc0825c15d6362b3f999a55bcaf705c5fd9c519474e5aec
- SSDEEP 49152:nj9LxcO4Q5YljGvNPFsjGw+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyp:njBxcO4EYljM1yj80oAaldmdmnpp
- TLSH T1A2067B03B29544E9D1A6C170CE5AD6319731BC584BF1A6EF3280BAD93E73AD07B39712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_fea6fdfd325293e5cd9496d71d6d5840_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_fea6fdfd325293e5cd9496d71d6d5840_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_fea6fdfd325293e5cd9496d71d6d5840_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar
- Size 3.7MB
- SHA256 1cdbed2d339acf29b2bede9e9e01c40dfe5b248da68983173da637c1148ce155
- MD5 fea6fdfd325293e5cd9496d71d6d5840
- SHA1 059f90f565f1672f62339514d134afe8aa888c88
- SHA512 0d7463b99a8a2cf767557e252b736c5b48414213f9c399e6da1bc4a8660666b43f18e8184b2fde002fc0825c15d6362b3f999a55bcaf705c5fd9c519474e5aec
- SSDEEP 49152:nj9LxcO4Q5YljGvNPFsjGw+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyp:njBxcO4EYljM1yj80oAaldmdmnpp
- TLSH T1A2067B03B29544E9D1A6C170CE5AD6319731BC584BF1A6EF3280BAD93E73AD07B39712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory