General
- Target 2026-06-02_1c14cd342e7f9d6dcdc97bc68158a06c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260602-ba19fabw7m
- SHA256 0a2877c3f188a816c0615b67280a0cea3d860d83ca677bf4b9b15a4d4b8cbecd
- MD5 1c14cd342e7f9d6dcdc97bc68158a06c
- SHA1 823087dbd324786e2262b2d624e7f96525a3283d
- SHA512 87b825c2c9bf15a9388595ca2eb885dfd1940b59c8f5e453bbfba83a81de485339b00c15f13cf4f23bc3b9fcceb18c088cf5d98f037a70e70ca677cf0db63560
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWXC:GDVmpzKwxx+1L6goYq1iuWXC
- TLSH T103D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_1c14cd342e7f9d6dcdc97bc68158a06c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_1c14cd342e7f9d6dcdc97bc68158a06c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_1c14cd342e7f9d6dcdc97bc68158a06c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 0a2877c3f188a816c0615b67280a0cea3d860d83ca677bf4b9b15a4d4b8cbecd
- MD5 1c14cd342e7f9d6dcdc97bc68158a06c
- SHA1 823087dbd324786e2262b2d624e7f96525a3283d
- SHA512 87b825c2c9bf15a9388595ca2eb885dfd1940b59c8f5e453bbfba83a81de485339b00c15f13cf4f23bc3b9fcceb18c088cf5d98f037a70e70ca677cf0db63560
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWXC:GDVmpzKwxx+1L6goYq1iuWXC
- TLSH T103D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory