General
- Target 2026-04-15_48099e48f1b63df75727efd6a68d2da9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 23.7MB
- Sample260415-3aybbsd19t
- SHA256 8a2ff635ad6788cd744cb9ce3e424428571e4ed9d970fc9d868902a645ef21b0
- MD5 48099e48f1b63df75727efd6a68d2da9
- SHA1 0bf48a4ecf27b4fa15e3cca7e051813595a81bd4
- SHA512 a4462aadfde55da89d968def99225d4ad7f8778e351dbc23a7870f978d6cfa4f1ac0e05bfbe9d7352cf24a86372eafa8b8ab7e469db74f9b6c7e44162abe5c95
- SSDEEP 393216:ByZ/K0ttYZTPyZ/K0ttYZTByZ/K0ttYZTPyZ/K0ttYZTCj:ByZ/K0ttYZTPyZ/K0ttYZTByZ/K0ttYG
- TLSH T177475C03F1E541A9E0AAD174CB769731EB327C564BF1A5DF2240B6E41E32AD07B38726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_48099e48f1b63df75727efd6a68d2da9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_48099e48f1b63df75727efd6a68d2da9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_48099e48f1b63df75727efd6a68d2da9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 23.7MB
- SHA256 8a2ff635ad6788cd744cb9ce3e424428571e4ed9d970fc9d868902a645ef21b0
- MD5 48099e48f1b63df75727efd6a68d2da9
- SHA1 0bf48a4ecf27b4fa15e3cca7e051813595a81bd4
- SHA512 a4462aadfde55da89d968def99225d4ad7f8778e351dbc23a7870f978d6cfa4f1ac0e05bfbe9d7352cf24a86372eafa8b8ab7e469db74f9b6c7e44162abe5c95
- SSDEEP 393216:ByZ/K0ttYZTPyZ/K0ttYZTByZ/K0ttYZTPyZ/K0ttYZTCj:ByZ/K0ttYZTPyZ/K0ttYZTByZ/K0ttYG
- TLSH T177475C03F1E541A9E0AAD174CB769731EB327C564BF1A5DF2240B6E41E32AD07B38726
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry