General
- Target 2026-04-17_569973eb57f4fbe95551fb39e92c34c8_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260417-b2dmfsdv4k
- SHA256 6c1aeae61b77da67541d260f749b8926215725ed0e05e0ecc0c186676c94b1ff
- MD5 569973eb57f4fbe95551fb39e92c34c8
- SHA1 1f2d13064476a80f831cd94dfe64fadee4388ca7
- SHA512 52bf0fb273fd5bd13017af9dadb5bfad45276a01efc7ec165fd1452e7a879b5ea5230fe8d2732207090cef0cbdfee1b545e794a120ab08ea707b041e6feaab9d
- SSDEEP 12288:GaoVmp+84Yp+E9UuFuUGx+zR5JeKsghPBOqwh7iuWX/:GDVmpz1pjk+hexgAjh7iuWX/
- TLSH T1D4D46B1176D0CF31E2AF053299659AB85A7FBC208F2087CB63947E2DBE306C19A35757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_569973eb57f4fbe95551fb39e92c34c8_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_569973eb57f4fbe95551fb39e92c34c8_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_569973eb57f4fbe95551fb39e92c34c8_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 6c1aeae61b77da67541d260f749b8926215725ed0e05e0ecc0c186676c94b1ff
- MD5 569973eb57f4fbe95551fb39e92c34c8
- SHA1 1f2d13064476a80f831cd94dfe64fadee4388ca7
- SHA512 52bf0fb273fd5bd13017af9dadb5bfad45276a01efc7ec165fd1452e7a879b5ea5230fe8d2732207090cef0cbdfee1b545e794a120ab08ea707b041e6feaab9d
- SSDEEP 12288:GaoVmp+84Yp+E9UuFuUGx+zR5JeKsghPBOqwh7iuWX/:GDVmpz1pjk+hexgAjh7iuWX/
- TLSH T1D4D46B1176D0CF31E2AF053299659AB85A7FBC208F2087CB63947E2DBE306C19A35757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory