General
- Target 2026-04-16_8ad1dae917914e106f6489ea4a3ef318_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar
- Size 1.1MB
- Sample260416-jcb2bsdv2y
- SHA256 14793d4fbfd6b747fb9480bc82b35d4c066408b7b3a808280ebbd3be52976d96
- MD5 8ad1dae917914e106f6489ea4a3ef318
- SHA1 8c0abdb86790b09ac3a3b553faaa89b289c094d4
- SHA512 5a47c593cf7d31afb465481988d5a35c47db2d3cc07bac5509f6e68dc47a8bbdea26ce766f6791be56bba87c24a522abbd666adefb31abc8bfa856941794a8f3
- SSDEEP 24576:EK2eTEe+3lRaYFKrDA+ouZ/K0tbKMLpzyl:d2od+3lRaYSDA+ouZ/K0tDpy
- TLSH T132359D17F68510F8D05ED1788786A632EA72B8660B34B9DF079086662F77BE06F3D740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-04-16_8ad1dae917914e106f6489ea4a3ef318_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_8ad1dae917914e106f6489ea4a3ef318_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_8ad1dae917914e106f6489ea4a3ef318_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_vidar
- Size 1.1MB
- SHA256 14793d4fbfd6b747fb9480bc82b35d4c066408b7b3a808280ebbd3be52976d96
- MD5 8ad1dae917914e106f6489ea4a3ef318
- SHA1 8c0abdb86790b09ac3a3b553faaa89b289c094d4
- SHA512 5a47c593cf7d31afb465481988d5a35c47db2d3cc07bac5509f6e68dc47a8bbdea26ce766f6791be56bba87c24a522abbd666adefb31abc8bfa856941794a8f3
- SSDEEP 24576:EK2eTEe+3lRaYFKrDA+ouZ/K0tbKMLpzyl:d2od+3lRaYSDA+ouZ/K0tDpy
- TLSH T132359D17F68510F8D05ED1788786A632EA72B8660B34B9DF079086662F77BE06F3D740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.