General
- Target 2026-04-17_4a786b24cf7fbc89653d74307a876aec_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar
- Size 3.3MB
- Sample260417-sethtsc12t
- SHA256 be036a1ef8fd4d0b2e03c48b48731f8de3821b6df1ae6385d597a1a44ff3d7e0
- MD5 4a786b24cf7fbc89653d74307a876aec
- SHA1 067c8df376abcb4ae3378de2ad35884225f194df
- SHA512 cf8595b30f38f3077b6787f22a7fc1f516565e42f3c458983a63d0a1af119171c53c15a1b2804a88fd1d19cf2d8343e5e09bf8b3bd76912655834fa4ce90c463
- SSDEEP 49152:Dv9Mdv9MRs8xmN3Aek03noj45wlDTn35DMnCIjtAyVPji0AjP5ta1Lu:b9M9ReUJF3noxD255zjoT5ta1S
- TLSH T1E3F56D01F65046F9D4268131CA91626DB6777C118762DE8B1398EEACBFF29D09D3A333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_4a786b24cf7fbc89653d74307a876aec_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_4a786b24cf7fbc89653d74307a876aec_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_4a786b24cf7fbc89653d74307a876aec_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar
- Size 3.3MB
- SHA256 be036a1ef8fd4d0b2e03c48b48731f8de3821b6df1ae6385d597a1a44ff3d7e0
- MD5 4a786b24cf7fbc89653d74307a876aec
- SHA1 067c8df376abcb4ae3378de2ad35884225f194df
- SHA512 cf8595b30f38f3077b6787f22a7fc1f516565e42f3c458983a63d0a1af119171c53c15a1b2804a88fd1d19cf2d8343e5e09bf8b3bd76912655834fa4ce90c463
- SSDEEP 49152:Dv9Mdv9MRs8xmN3Aek03noj45wlDTn35DMnCIjtAyVPji0AjP5ta1Lu:b9M9ReUJF3noxD255zjoT5ta1S
- TLSH T1E3F56D01F65046F9D4268131CA91626DB6777C118762DE8B1398EEACBFF29D09D3A333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory