General
- Target 2026-04-15_645da22e53023a1140431ba9334f6a0c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 10.4MB
- Sample260415-srkfpabx2j
- SHA256 b3fc0af28bfe66238691b79b46d7aa8aa553e19889e0bc5714ad97a9fbe6ddba
- MD5 645da22e53023a1140431ba9334f6a0c
- SHA1 8b83b4292ff99797d921bb3855b6c66676b8ab21
- SHA512 58ecab1a88d7e17115743f52cfcbdf6ee802059a1f383df47221de3f456ecdd1c1554718913d81db6529d9c4041acf5c3d059720b6d83c846e619e1e5b1fd9c8
- SSDEEP 98304:Pe5x6c1/e5x6c1tLapIRe5x6c1/e5x6c1tLapIjQvGAdlCEL8c/bRNw5CO:IkZcIGkZcIMvyEYc/b3w8O
- TLSH T141B6392276E140F5D69A9030CF668631E7B17C5A4BF1979B6240F6DA2F335C07E3932A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_645da22e53023a1140431ba9334f6a0c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_645da22e53023a1140431ba9334f6a0c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_645da22e53023a1140431ba9334f6a0c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 10.4MB
- SHA256 b3fc0af28bfe66238691b79b46d7aa8aa553e19889e0bc5714ad97a9fbe6ddba
- MD5 645da22e53023a1140431ba9334f6a0c
- SHA1 8b83b4292ff99797d921bb3855b6c66676b8ab21
- SHA512 58ecab1a88d7e17115743f52cfcbdf6ee802059a1f383df47221de3f456ecdd1c1554718913d81db6529d9c4041acf5c3d059720b6d83c846e619e1e5b1fd9c8
- SSDEEP 98304:Pe5x6c1/e5x6c1tLapIRe5x6c1/e5x6c1tLapIjQvGAdlCEL8c/bRNw5CO:IkZcIGkZcIMvyEYc/b3w8O
- TLSH T141B6392276E140F5D69A9030CF668631E7B17C5A4BF1979B6240F6DA2F335C07E3932A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry