General
- Target 2026-04-19_3b1f7f26e45a47fa3125b48d05e01591_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260419-sdjbgadv2r
- SHA256 284e1a7fe094d70079fa723e894c1482049f9ac5e021bf24711203066aeadc07
- MD5 3b1f7f26e45a47fa3125b48d05e01591
- SHA1 1f5c58da378414008406400c3ef0012c3ac28d2f
- SHA512 65630fc129d4f8fe7a95671553c940b6969fe65182648acb5b402b276baa47753cc20db41689bffed8f6a72ab459e3c1d0e33603f1b8ed29a0ae36dfe31d3e04
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWX5:GDVmpzKwxx+1L6goYq1iuWX5
- TLSH T1A1D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_3b1f7f26e45a47fa3125b48d05e01591_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_3b1f7f26e45a47fa3125b48d05e01591_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_3b1f7f26e45a47fa3125b48d05e01591_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 284e1a7fe094d70079fa723e894c1482049f9ac5e021bf24711203066aeadc07
- MD5 3b1f7f26e45a47fa3125b48d05e01591
- SHA1 1f5c58da378414008406400c3ef0012c3ac28d2f
- SHA512 65630fc129d4f8fe7a95671553c940b6969fe65182648acb5b402b276baa47753cc20db41689bffed8f6a72ab459e3c1d0e33603f1b8ed29a0ae36dfe31d3e04
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWX5:GDVmpzKwxx+1L6goYq1iuWX5
- TLSH T1A1D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory