General
- Target 2026-05-11_a412cec1dc20f4b99d057f55f260a9ff_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260511-dft4esdy6m
- SHA256 8d98d44efbee6ff1550abc972fdbc375c914593946e2192be853cd843b70f314
- MD5 a412cec1dc20f4b99d057f55f260a9ff
- SHA1 48fa178dc77c244b7f19d40b1509031360c2d054
- SHA512 4c6218217d18c7e999a05ddde2e497c4dfb5a7ae6d581c62998851d54144f9cb7bf587d429432acf119de760148f242f4051333f002e744572af1a8c7b5272ee
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWXo:GDVmpzKwxx+1L6goYq1iuWXo
- TLSH T1D0D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_a412cec1dc20f4b99d057f55f260a9ff_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_a412cec1dc20f4b99d057f55f260a9ff_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_a412cec1dc20f4b99d057f55f260a9ff_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 8d98d44efbee6ff1550abc972fdbc375c914593946e2192be853cd843b70f314
- MD5 a412cec1dc20f4b99d057f55f260a9ff
- SHA1 48fa178dc77c244b7f19d40b1509031360c2d054
- SHA512 4c6218217d18c7e999a05ddde2e497c4dfb5a7ae6d581c62998851d54144f9cb7bf587d429432acf119de760148f242f4051333f002e744572af1a8c7b5272ee
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWXo:GDVmpzKwxx+1L6goYq1iuWXo
- TLSH T1D0D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory