General
- Target 2026-04-24_f54061ee128ff6379a1e37596d225a29_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 342KB
- Sample260424-dalvvsdt61
- SHA256 8e32217cd0433dcb6b0271f1c333b858b0d2c131fa37bffa772ae6d853c52e30
- MD5 f54061ee128ff6379a1e37596d225a29
- SHA1 e31a8604a9c7ff382eabf9ad896ef0eaa7e69f7f
- SHA512 96226797b9e1d8675669831785677713ce1eeb6a826f9deb1d04874134362accc4948442c94d010a7b8c36313cfc8de735ddc0d12724469cc877a9c406ff13b6
- SSDEEP 6144:GjuDOhVLS5nj+CPXIY8EXAe6QPqksB+EYDiuW1FXEK:GaoVmp+84Y82Ae6D1B+EYDiuWX7
- TLSH T111747C1136D08FB1E1AF443148A59E748BBBFC304E219BDB63947E2D3E31981DA26767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-24_f54061ee128ff6379a1e37596d225a29_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_f54061ee128ff6379a1e37596d225a29_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_f54061ee128ff6379a1e37596d225a29_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 342KB
- SHA256 8e32217cd0433dcb6b0271f1c333b858b0d2c131fa37bffa772ae6d853c52e30
- MD5 f54061ee128ff6379a1e37596d225a29
- SHA1 e31a8604a9c7ff382eabf9ad896ef0eaa7e69f7f
- SHA512 96226797b9e1d8675669831785677713ce1eeb6a826f9deb1d04874134362accc4948442c94d010a7b8c36313cfc8de735ddc0d12724469cc877a9c406ff13b6
- SSDEEP 6144:GjuDOhVLS5nj+CPXIY8EXAe6QPqksB+EYDiuW1FXEK:GaoVmp+84Y82Ae6D1B+EYDiuWX7
- TLSH T111747C1136D08FB1E1AF443148A59E748BBBFC304E219BDB63947E2D3E31981DA26767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory