General
- Target 2026-11-11_0a249bdb79b41d66eb0f7e45a01c868c_amadey_cobalt-strike_glassworm_hammertoss_icedid_luca-stealer_njrat_remcos_vidar
- Size 3.9MB
- Sample261113-we22raet71
- SHA256 bab1dbc306deef359c7e8ecdd1274f11c508188e3415e192224e4777ab714b69
- MD5 0a249bdb79b41d66eb0f7e45a01c868c
- SHA1 2aa2a8bdec3bb9cc703607c846f916f25cd05b60
- SHA512 9b87f0070ff1008ca1ba8e94c5d868f9c2cbc8b75af1bff546c602a5c68242b9b3851ddca28b9346803dfadd3f382e8a804ae6a9ee0c74ad526d74203f2d203a
- SSDEEP 49152:RVj3jF2sAlo/43FCPLQ+Ebh8NsB+f94OKLvci5R77CuiYrs4mPXD4ynUIwbEmk:DrjFiOmC/65TowxCuiLfP8Rro
- TLSH T11A165C07BBE6175CE6F78E74957AA3210831FC285910CA6E2190A53DCDB1EC08D65FBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_0a249bdb79b41d66eb0f7e45a01c868c_amadey_cobalt-strike_glassworm_hammertoss_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-11_0a249bdb79b41d66eb0f7e45a01c868c_amadey_cobalt-strike_glassworm_hammertoss_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_0a249bdb79b41d66eb0f7e45a01c868c_amadey_cobalt-strike_glassworm_hammertoss_icedid_luca-stealer_njrat_remcos_vidar
- Size 3.9MB
- SHA256 bab1dbc306deef359c7e8ecdd1274f11c508188e3415e192224e4777ab714b69
- MD5 0a249bdb79b41d66eb0f7e45a01c868c
- SHA1 2aa2a8bdec3bb9cc703607c846f916f25cd05b60
- SHA512 9b87f0070ff1008ca1ba8e94c5d868f9c2cbc8b75af1bff546c602a5c68242b9b3851ddca28b9346803dfadd3f382e8a804ae6a9ee0c74ad526d74203f2d203a
- SSDEEP 49152:RVj3jF2sAlo/43FCPLQ+Ebh8NsB+f94OKLvci5R77CuiYrs4mPXD4ynUIwbEmk:DrjFiOmC/65TowxCuiLfP8Rro
- TLSH T11A165C07BBE6175CE6F78E74957AA3210831FC285910CA6E2190A53DCDB1EC08D65FBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.