General
- Target 2026-06-02_a81a6c27c38911a1e6f988c80cc3dcb2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 18.0MB
- Sample260602-weyz4aby5x
- SHA256 5fe071caf5ae7e45064c050f7e7b39dd73a6dfd3d0fc719540349b86dfef9b2e
- MD5 a81a6c27c38911a1e6f988c80cc3dcb2
- SHA1 c67b4ab553d7fe7ac227fe4b1a4e44eb171cf921
- SHA512 3a42419bf0d63ccb3fee2b85bf780e95250786cbc7f179fb7cf2851aee05d8bd137b76af559478371ea39fcf8c723abac7dd18f6200509c0269186aa6689d5b9
- SSDEEP 196608:JtcITtcIfvyEYc/b3w8+tcITtcIfvyEYc/b3w8T:IBEvyEYKb7BEvyEYKbf
- TLSH T106172822B6E140A5D19A9030CF668631E7F27C694FF197AB6141F6DE2F335C03E2971A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_a81a6c27c38911a1e6f988c80cc3dcb2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_a81a6c27c38911a1e6f988c80cc3dcb2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_a81a6c27c38911a1e6f988c80cc3dcb2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 18.0MB
- SHA256 5fe071caf5ae7e45064c050f7e7b39dd73a6dfd3d0fc719540349b86dfef9b2e
- MD5 a81a6c27c38911a1e6f988c80cc3dcb2
- SHA1 c67b4ab553d7fe7ac227fe4b1a4e44eb171cf921
- SHA512 3a42419bf0d63ccb3fee2b85bf780e95250786cbc7f179fb7cf2851aee05d8bd137b76af559478371ea39fcf8c723abac7dd18f6200509c0269186aa6689d5b9
- SSDEEP 196608:JtcITtcIfvyEYc/b3w8+tcITtcIfvyEYc/b3w8T:IBEvyEYKb7BEvyEYKbf
- TLSH T106172822B6E140A5D19A9030CF668631E7F27C694FF197AB6141F6DE2F335C03E2971A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry