General
- Target 2026-04-26_79792e36a92254d5162f779fc96b75c2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 342KB
- Sample260426-m91mqsft2x
- SHA256 fc5d1ed154e7ec41a99c9de88dec156df8166fe3eb4c6e13155dd6cc937db3dd
- MD5 79792e36a92254d5162f779fc96b75c2
- SHA1 2f947d4c0832a5e560da0b924cfed43a3b26e2bb
- SHA512 8eede9cccf0ba6de0e2eb235770abe6f227159c60d479625134bdcba0ea6bf79525097221990f51b02e5fc600d97d68bd34138efb31d28ba4f11836e4266f6d7
- SSDEEP 6144:GjuDOhVLS5nj+CPXIY8EXAe6QPqksB+EYDiuW1FXEC:GaoVmp+84Y82Ae6D1B+EYDiuWX7
- TLSH T15F747C1136D08FB1E1AF443148A59E748BBBFC304E219BDB63947E2D3E31981DA26767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-26_79792e36a92254d5162f779fc96b75c2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_79792e36a92254d5162f779fc96b75c2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-26_79792e36a92254d5162f779fc96b75c2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 342KB
- SHA256 fc5d1ed154e7ec41a99c9de88dec156df8166fe3eb4c6e13155dd6cc937db3dd
- MD5 79792e36a92254d5162f779fc96b75c2
- SHA1 2f947d4c0832a5e560da0b924cfed43a3b26e2bb
- SHA512 8eede9cccf0ba6de0e2eb235770abe6f227159c60d479625134bdcba0ea6bf79525097221990f51b02e5fc600d97d68bd34138efb31d28ba4f11836e4266f6d7
- SSDEEP 6144:GjuDOhVLS5nj+CPXIY8EXAe6QPqksB+EYDiuW1FXEC:GaoVmp+84Y82Ae6D1B+EYDiuWX7
- TLSH T15F747C1136D08FB1E1AF443148A59E748BBBFC304E219BDB63947E2D3E31981DA26767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory