General
- Target 2026-05-04_329f871d9be307e30fd4a53d491e240d_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_vidar
- Size 5.4MB
- Sample260504-qb6ymsgv8l
- SHA256 5183f21331fd085b121cb063d29f72f258aa9f61bfe8ea2dfd060a1bb27ed4a7
- MD5 329f871d9be307e30fd4a53d491e240d
- SHA1 9c9cbc66c6f48dca0fa05c217bdab82e92265ebd
- SHA512 be7661bc2e43ecf40485e66cc827281f465ef7825dfbfff64f545b482a4509939d18e2a39d4d8d41b82023bda642a9f30b2b026863a1e997895c6b2d33ecfa5c
- SSDEEP 98304:kFkY2UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnoMnUm8Uw:O2S9+ULdNPtbuPZOOmnp18Uw
- TLSH T13E46D022FB9181BDD41F9176899886A5E5B2FC2017389FCB0754B61EEF726C36F36210
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-04_329f871d9be307e30fd4a53d491e240d_amadey_cobalt-strike_elex_hijackloader_icedid_luca-steal.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_329f871d9be307e30fd4a53d491e240d_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_vidar
- Size 5.4MB
- SHA256 5183f21331fd085b121cb063d29f72f258aa9f61bfe8ea2dfd060a1bb27ed4a7
- MD5 329f871d9be307e30fd4a53d491e240d
- SHA1 9c9cbc66c6f48dca0fa05c217bdab82e92265ebd
- SHA512 be7661bc2e43ecf40485e66cc827281f465ef7825dfbfff64f545b482a4509939d18e2a39d4d8d41b82023bda642a9f30b2b026863a1e997895c6b2d33ecfa5c
- SSDEEP 98304:kFkY2UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnoMnUm8Uw:O2S9+ULdNPtbuPZOOmnp18Uw
- TLSH T13E46D022FB9181BDD41F9176899886A5E5B2FC2017389FCB0754B61EEF726C36F36210
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory