General
- Target 2026-04-19_4a8319ad078fcb04f9e3bdbcd14c1b29_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260419-pc9v9aex2v
- SHA256 ad673774d316a1d76ea0ca217217c2e98a36678514af92e2cfeaa6f7b557db04
- MD5 4a8319ad078fcb04f9e3bdbcd14c1b29
- SHA1 ecd72df841a05eb6dfddcf0113b89436ea65259c
- SHA512 5a7cf6338fe950ec0de538d7779b7402e98f983653864fd26e53e428190c3799cfe8a1cd63329c943caf1373bc38096c81ff46c6d458a2fbfeb503d0c30f42f0
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWXw:GDVmpzKwxx+1L6goYq1iuWXw
- TLSH T199D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_4a8319ad078fcb04f9e3bdbcd14c1b29_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_4a8319ad078fcb04f9e3bdbcd14c1b29_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_4a8319ad078fcb04f9e3bdbcd14c1b29_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 ad673774d316a1d76ea0ca217217c2e98a36678514af92e2cfeaa6f7b557db04
- MD5 4a8319ad078fcb04f9e3bdbcd14c1b29
- SHA1 ecd72df841a05eb6dfddcf0113b89436ea65259c
- SHA512 5a7cf6338fe950ec0de538d7779b7402e98f983653864fd26e53e428190c3799cfe8a1cd63329c943caf1373bc38096c81ff46c6d458a2fbfeb503d0c30f42f0
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWXw:GDVmpzKwxx+1L6goYq1iuWXw
- TLSH T199D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory