General
- Target 2026-04-20_a67e9e52f8296fa9aba59a1a28c9ca13_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar_wannacry
- Size 7.5MB
- Sample260420-sdxh4ady3m
- SHA256 f3a625c971217116f0e86a6682a33b3b7b9fd329e2a624f8c0f9007a094c0126
- MD5 a67e9e52f8296fa9aba59a1a28c9ca13
- SHA1 5dcfda959e7bffabc5ed94a329ad18d33c6e0153
- SHA512 1c39b55aeb9f84407bbf99523131f2eac80e61a179b61732634e852fbf7cf3ac1ed6bb4b65d263a7db46bb480f2450dc1c8fce9719cbb1fb9a13d48b2e863d7f
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1MMee5x6c1/e5x6c1ze5x6c1623S:IkQkoMFkQG
- TLSH T186868D12F69140F5D7AA1930446A6736EA36FE060B15CBCB9354DE693E332C0ED3636B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_a67e9e52f8296fa9aba59a1a28c9ca13_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar_wannacry.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_a67e9e52f8296fa9aba59a1a28c9ca13_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar_wannacry.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_a67e9e52f8296fa9aba59a1a28c9ca13_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar_wannacry
- Size 7.5MB
- SHA256 f3a625c971217116f0e86a6682a33b3b7b9fd329e2a624f8c0f9007a094c0126
- MD5 a67e9e52f8296fa9aba59a1a28c9ca13
- SHA1 5dcfda959e7bffabc5ed94a329ad18d33c6e0153
- SHA512 1c39b55aeb9f84407bbf99523131f2eac80e61a179b61732634e852fbf7cf3ac1ed6bb4b65d263a7db46bb480f2450dc1c8fce9719cbb1fb9a13d48b2e863d7f
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1MMee5x6c1/e5x6c1ze5x6c1623S:IkQkoMFkQG
- TLSH T186868D12F69140F5D7AA1930446A6736EA36FE060B15CBCB9354DE693E332C0ED3636B
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry