General
- Target 2026-04-22_e1ba181b1cbcaeb479ee378f28bfbdfb_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260422-talg4aew7z
- SHA256 b3c5c7dd98c49be5648e2ec9fdcb84c856ab1f50dcf85613a614597c8fa05c85
- MD5 e1ba181b1cbcaeb479ee378f28bfbdfb
- SHA1 87f6307e734ab8dcf22d5233807d4a55e5289821
- SHA512 ec0a8cbdba2e3480149512d52af7fb9a1c64dfffa18ce5cd733784a48d701bef9962b32d85cbeb40e0f920291c268d81184e0b50bee7dd59fd4024261b33a1b8
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWXm:GDVmpzKwxx+1L6goYq1iuWXm
- TLSH T197D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_e1ba181b1cbcaeb479ee378f28bfbdfb_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_e1ba181b1cbcaeb479ee378f28bfbdfb_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_e1ba181b1cbcaeb479ee378f28bfbdfb_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 b3c5c7dd98c49be5648e2ec9fdcb84c856ab1f50dcf85613a614597c8fa05c85
- MD5 e1ba181b1cbcaeb479ee378f28bfbdfb
- SHA1 87f6307e734ab8dcf22d5233807d4a55e5289821
- SHA512 ec0a8cbdba2e3480149512d52af7fb9a1c64dfffa18ce5cd733784a48d701bef9962b32d85cbeb40e0f920291c268d81184e0b50bee7dd59fd4024261b33a1b8
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWXm:GDVmpzKwxx+1L6goYq1iuWXm
- TLSH T197D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory