General
- Target 2026-10-01_3929fc0ffb35f0dc0ecb2222b4796cfa_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_remcos_vidar
- Size 3.9MB
- Sample261002-t4hcjaydnd
- SHA256 6280632ca7ed49e43913cbcb65831555bae87c5bbc99ddef0b44b5dd02036e16
- MD5 3929fc0ffb35f0dc0ecb2222b4796cfa
- SHA1 b7e3a5dc2d25ef331e7f3831bfda3dd8bdbd1e6e
- SHA512 44906fea860327fe0d11dc8d030f73c35b5628c133da4a12f6a7e146c805601a73866f33a723d049303d70f33b30066b63b19f24553c74a3166bea8e5e46a18b
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluwqjXpMC5mqatgl3eW4SkZP4sz9Mbsdqatg8:TID41F5EwfkZcsxn
- TLSH T1D6166D51B7E48633E0B3417184A7569A6E3278118F329ACF13446BADBF737C09A32776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_3929fc0ffb35f0dc0ecb2222b4796cfa_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_remcos_vidar.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_3929fc0ffb35f0dc0ecb2222b4796cfa_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_3929fc0ffb35f0dc0ecb2222b4796cfa_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_remcos_vidar
- Size 3.9MB
- SHA256 6280632ca7ed49e43913cbcb65831555bae87c5bbc99ddef0b44b5dd02036e16
- MD5 3929fc0ffb35f0dc0ecb2222b4796cfa
- SHA1 b7e3a5dc2d25ef331e7f3831bfda3dd8bdbd1e6e
- SHA512 44906fea860327fe0d11dc8d030f73c35b5628c133da4a12f6a7e146c805601a73866f33a723d049303d70f33b30066b63b19f24553c74a3166bea8e5e46a18b
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHyqatglYqatgluwqjXpMC5mqatgl3eW4SkZP4sz9Mbsdqatg8:TID41F5EwfkZcsxn
- TLSH T1D6166D51B7E48633E0B3417184A7569A6E3278118F329ACF13446BADBF737C09A32776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory