General
- Target 2026-06-01_288079a68529e6ab6993c353d1e372a3_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260601-bwxhdadv3l
- SHA256 948f0310cdc4bb10e14332a1f1e1216893c32da27d2076c5e1daf905eef42a9a
- MD5 288079a68529e6ab6993c353d1e372a3
- SHA1 6a0317b93a66c73a2f19c1cdf0ee08ebf08af430
- SHA512 40337be1d99bb2b431fa2678a813189a6f8bb425cd5a0a6af9746c5d587636d1c63213bfbeb6c625e44512b2c00085cec39ee54bd1f65c8b9e7a0e65880a1ee9
- SSDEEP 12288:GaoVmp+84Yp+E9UuFuUGx+zR5JeKsghPBOqwh7iuWXo:GDVmpz1pjk+hexgAjh7iuWXo
- TLSH T193D46B1176D0CF31E2AF053299659AB85A7FBC208F2087CB63947E2DBE306C19A35757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_288079a68529e6ab6993c353d1e372a3_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_288079a68529e6ab6993c353d1e372a3_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_288079a68529e6ab6993c353d1e372a3_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 948f0310cdc4bb10e14332a1f1e1216893c32da27d2076c5e1daf905eef42a9a
- MD5 288079a68529e6ab6993c353d1e372a3
- SHA1 6a0317b93a66c73a2f19c1cdf0ee08ebf08af430
- SHA512 40337be1d99bb2b431fa2678a813189a6f8bb425cd5a0a6af9746c5d587636d1c63213bfbeb6c625e44512b2c00085cec39ee54bd1f65c8b9e7a0e65880a1ee9
- SSDEEP 12288:GaoVmp+84Yp+E9UuFuUGx+zR5JeKsghPBOqwh7iuWXo:GDVmpz1pjk+hexgAjh7iuWXo
- TLSH T193D46B1176D0CF31E2AF053299659AB85A7FBC208F2087CB63947E2DBE306C19A35757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory