General
- Target 2026-04-20_c934878b5d62405bec16c0d894351b08_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 8.2MB
- Sample260420-rr4c5agy4x
- SHA256 74482d478171ed2086f300876d3299aee303270ce3aaabb642093a76cec14e41
- MD5 c934878b5d62405bec16c0d894351b08
- SHA1 b7f5447cc35eb4d87a626f837c8a3b486c7327a2
- SHA512 89117cc936753394ad92b71eac85f2dbfd0d6fb04bc4d6f1cc37efe623ba6b05d30968fd6871bd6c7020c804735d802ac9ba72f20e5ac1f604a9394636bc56aa
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c3e5x6c1/e5x6c1ze5x6c1/e5x6c0hx0z:IkQkikQk2Kz
- TLSH T1D4869E12B6D240F5DA5918305B6A6736EAB5BD124B24CBC7C354FA191F322C0BD3A36F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_c934878b5d62405bec16c0d894351b08_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_c934878b5d62405bec16c0d894351b08_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_c934878b5d62405bec16c0d894351b08_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 8.2MB
- SHA256 74482d478171ed2086f300876d3299aee303270ce3aaabb642093a76cec14e41
- MD5 c934878b5d62405bec16c0d894351b08
- SHA1 b7f5447cc35eb4d87a626f837c8a3b486c7327a2
- SHA512 89117cc936753394ad92b71eac85f2dbfd0d6fb04bc4d6f1cc37efe623ba6b05d30968fd6871bd6c7020c804735d802ac9ba72f20e5ac1f604a9394636bc56aa
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c3e5x6c1/e5x6c1ze5x6c1/e5x6c0hx0z:IkQkikQk2Kz
- TLSH T1D4869E12B6D240F5DA5918305B6A6736EAB5BD124B24CBC7C354FA191F322C0BD3A36F
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry