General
- Target 2026-04-15_f00a530328a3d2cae13b40ec8bcd5563_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 25.2MB
- Sample260416-bq2vxagy2s
- SHA256 cc2d83c2d3a418a595721f0cbd0b6b3a2ae73be6be8b21fba955423bf14dc2e2
- MD5 f00a530328a3d2cae13b40ec8bcd5563
- SHA1 294fdb0d9bffb33c7ab2d52058e4066ba2f3b5fd
- SHA512 fa3e253241b3134ee7b8427c06783f46f4ad865579bf5ccd6352479fb96bd3723272033933f7fbdcc99ffb9bf0de72d8372f0e482d16935403105ff1779ee444
- SSDEEP 393216:ezRyZ/K0ttYZTLzRyZ/K0ttYZTBWqQjp3:ezRyZ/K0ttYZTLzRyZ/K0ttYZTUfjp3
- TLSH T1E0477C13B1E600E9D199D134CF2693319BB27C698BF196EB3240B6D42F72AD07B39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_f00a530328a3d2cae13b40ec8bcd5563_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_f00a530328a3d2cae13b40ec8bcd5563_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_f00a530328a3d2cae13b40ec8bcd5563_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 25.2MB
- SHA256 cc2d83c2d3a418a595721f0cbd0b6b3a2ae73be6be8b21fba955423bf14dc2e2
- MD5 f00a530328a3d2cae13b40ec8bcd5563
- SHA1 294fdb0d9bffb33c7ab2d52058e4066ba2f3b5fd
- SHA512 fa3e253241b3134ee7b8427c06783f46f4ad865579bf5ccd6352479fb96bd3723272033933f7fbdcc99ffb9bf0de72d8372f0e482d16935403105ff1779ee444
- SSDEEP 393216:ezRyZ/K0ttYZTLzRyZ/K0ttYZTBWqQjp3:ezRyZ/K0ttYZTLzRyZ/K0ttYZTUfjp3
- TLSH T1E0477C13B1E600E9D199D134CF2693319BB27C698BF196EB3240B6D42F72AD07B39716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry