General
- Target 2026-05-30_c5cb3f115c8c453bfbbd26ea2130a64d_amadey_cobalt-strike_elex_emotet_remcos_vidar_wannacry
- Size 8.3MB
- Sample260530-sdtr7sf17v
- SHA256 0bdd06bd20016f0fc2eb58c03c384288869074f43fe15f6c8dec558f4d79af3e
- MD5 c5cb3f115c8c453bfbbd26ea2130a64d
- SHA1 0b1ab2d84e478228f94397ac962a47e641dad35e
- SHA512 ddca3f3c9938cb92ab4231b9da6ff5867d637e13cc982da83008a03c71ddb250221111258c033bf186a911803abfb33a4924843fa9c2182900443c8aee643ab2
- SSDEEP 98304:Su5x6M1WoDDtu5x6M1WoDDCu5x6M1WoDDtu5x6M1WoDDwD:Ji8yi8Zi8yi8wD
- TLSH T102969E8172D04076E2BE093084799636E7B6FD561751C7CFA6D2FA6A3E323809D32727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-30_c5cb3f115c8c453bfbbd26ea2130a64d_amadey_cobalt-strike_elex_emotet_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-30_c5cb3f115c8c453bfbbd26ea2130a64d_amadey_cobalt-strike_elex_emotet_remcos_vidar_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-30_c5cb3f115c8c453bfbbd26ea2130a64d_amadey_cobalt-strike_elex_emotet_remcos_vidar_wannacry
- Size 8.3MB
- SHA256 0bdd06bd20016f0fc2eb58c03c384288869074f43fe15f6c8dec558f4d79af3e
- MD5 c5cb3f115c8c453bfbbd26ea2130a64d
- SHA1 0b1ab2d84e478228f94397ac962a47e641dad35e
- SHA512 ddca3f3c9938cb92ab4231b9da6ff5867d637e13cc982da83008a03c71ddb250221111258c033bf186a911803abfb33a4924843fa9c2182900443c8aee643ab2
- SSDEEP 98304:Su5x6M1WoDDtu5x6M1WoDDCu5x6M1WoDDtu5x6M1WoDDwD:Ji8yi8Zi8yi8wD
- TLSH T102969E8172D04076E2BE093084799636E7B6FD561751C7CFA6D2FA6A3E323809D32727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry