General
- Target 2026-05-05_287f7a214abc059b29956550fecdd863_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 395KB
- Sample260505-cedvdaew4w
- SHA256 0b4cc74b3c7a2ed7dbfa8ba29bdf6625b69a921f45de3a7a67efaee4c5d0d041
- MD5 287f7a214abc059b29956550fecdd863
- SHA1 8cf62acfc49c6029b176ae9fda802a1c807de903
- SHA512 a8483f0e836b6890b8906862169d054b7f898671387977cee3e1104b80960e0492cef772d3f4049dd0817814c67db128980c2aa1c88a2747592cef0f7d479b3b
- SSDEEP 6144:GjuDOhVLS5nj+CPXIYgtiP/aK2h9H/B+biiuW1FXE5:GaoVmp+84YgcP/aK2vB+WiuWXQ
- TLSH T1FC84381232F04AB9F0BB563158755B7596BBFC329E2197EF17802E6C3E309409A21B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-05_287f7a214abc059b29956550fecdd863_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_287f7a214abc059b29956550fecdd863_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_287f7a214abc059b29956550fecdd863_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 395KB
- SHA256 0b4cc74b3c7a2ed7dbfa8ba29bdf6625b69a921f45de3a7a67efaee4c5d0d041
- MD5 287f7a214abc059b29956550fecdd863
- SHA1 8cf62acfc49c6029b176ae9fda802a1c807de903
- SHA512 a8483f0e836b6890b8906862169d054b7f898671387977cee3e1104b80960e0492cef772d3f4049dd0817814c67db128980c2aa1c88a2747592cef0f7d479b3b
- SSDEEP 6144:GjuDOhVLS5nj+CPXIYgtiP/aK2h9H/B+biiuW1FXE5:GaoVmp+84YgcP/aK2vB+WiuWXQ
- TLSH T1FC84381232F04AB9F0BB563158755B7596BBFC329E2197EF17802E6C3E309409A21B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory