General
- Target 2026-04-17_3654cd82e3134bfe52c897e1a7bf036d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260417-d2cfhaes8n
- SHA256 99304d3541eec6e5dcb8f7c5f1093e06df4d96e7fdb09953adc136b2edeb3fbd
- MD5 3654cd82e3134bfe52c897e1a7bf036d
- SHA1 ccd6b09aa515a7aecc456b5d99bcca6a94a91b08
- SHA512 c0895579d700af40b5e9eb52d51d277587af84c38a39745d31f042cb31848e469a03b69993649c604dae7afec9c1333a9fc6cdf1b11bdf350f0774609c41cbc5
- SSDEEP 12288:GaoVmp+84Yp+E9UuFuUGx+zR5JeKsghPBOqwh7iuWXl:GDVmpz1pjk+hexgAjh7iuWXl
- TLSH T114D46B1176D0CF31E2AF053299659AB85A7FBC208F2087CB63947E2DBE306C19A35757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_3654cd82e3134bfe52c897e1a7bf036d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_3654cd82e3134bfe52c897e1a7bf036d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_3654cd82e3134bfe52c897e1a7bf036d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 99304d3541eec6e5dcb8f7c5f1093e06df4d96e7fdb09953adc136b2edeb3fbd
- MD5 3654cd82e3134bfe52c897e1a7bf036d
- SHA1 ccd6b09aa515a7aecc456b5d99bcca6a94a91b08
- SHA512 c0895579d700af40b5e9eb52d51d277587af84c38a39745d31f042cb31848e469a03b69993649c604dae7afec9c1333a9fc6cdf1b11bdf350f0774609c41cbc5
- SSDEEP 12288:GaoVmp+84Yp+E9UuFuUGx+zR5JeKsghPBOqwh7iuWXl:GDVmpz1pjk+hexgAjh7iuWXl
- TLSH T114D46B1176D0CF31E2AF053299659AB85A7FBC208F2087CB63947E2DBE306C19A35757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory