General
- Target 2026-04-15_59ac482b385f35390875389d6bbc8137_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 6.3MB
- Sample260415-sffclaay9m
- SHA256 1ed19ed1e5b30c296caf292100d43e6391db24156432a49d3186da9a6d5691ac
- MD5 59ac482b385f35390875389d6bbc8137
- SHA1 c895ebb807963d9c61d9150f57d7c8ee8d079fa7
- SHA512 844be09c2c76ff675d003ff9ec8cd2e705aeedca9661927e8f101f6e35ed99fc0dda3dbb7d17cd1172682b8cf04fd5a7d3eaf7071b6a16b576dd3e079005984c
- SSDEEP 98304:Pe5x6c1/e5x6c1bQvGAdlCEL8c/bRNw5CO:IkAvyEYc/b3w8O
- TLSH T175667D51BBE880F5E5A7D134897A9676F776B8020E31DB8F0250CA6F2F336905D39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_59ac482b385f35390875389d6bbc8137_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_59ac482b385f35390875389d6bbc8137_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_59ac482b385f35390875389d6bbc8137_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 6.3MB
- SHA256 1ed19ed1e5b30c296caf292100d43e6391db24156432a49d3186da9a6d5691ac
- MD5 59ac482b385f35390875389d6bbc8137
- SHA1 c895ebb807963d9c61d9150f57d7c8ee8d079fa7
- SHA512 844be09c2c76ff675d003ff9ec8cd2e705aeedca9661927e8f101f6e35ed99fc0dda3dbb7d17cd1172682b8cf04fd5a7d3eaf7071b6a16b576dd3e079005984c
- SSDEEP 98304:Pe5x6c1/e5x6c1bQvGAdlCEL8c/bRNw5CO:IkAvyEYc/b3w8O
- TLSH T175667D51BBE880F5E5A7D134897A9676F776B8020E31DB8F0250CA6F2F336905D39326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry