General
- Target 2026-06-05_1336f9eee32299e18d7d3dd0c3ebd54f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 9.6MB
- Sample260605-pqrltsft7w
- SHA256 96e65b240a5ce0d5e7fd4390dcf0ac9ffeb39b7e0d3f1517d704cecf97081cf8
- MD5 1336f9eee32299e18d7d3dd0c3ebd54f
- SHA1 e5b7775f0c369b192b4c8f5bc54f2cea584afcdb
- SHA512 d3eeb7367b88896b276609771369244104a53155ba9fedcbacdb33adbcb3ab59a3c85472df8ad4546d69860a88c627a86772fff7f1f7fedd42a0b9a854fdead1
- SSDEEP 98304:Su5x6M1WoDDtu5x6M1WoDDCu5x6M1WoDDtu5x6M1WoDDchx0z:Ji8yi8Zi8yi8UKz
- TLSH T1E9A69D9172E00076E16E4530876A9735D7F6BC625B90C7CFD6C2FA1A2E327C06A36727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-05_1336f9eee32299e18d7d3dd0c3ebd54f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-05_1336f9eee32299e18d7d3dd0c3ebd54f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-05_1336f9eee32299e18d7d3dd0c3ebd54f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 9.6MB
- SHA256 96e65b240a5ce0d5e7fd4390dcf0ac9ffeb39b7e0d3f1517d704cecf97081cf8
- MD5 1336f9eee32299e18d7d3dd0c3ebd54f
- SHA1 e5b7775f0c369b192b4c8f5bc54f2cea584afcdb
- SHA512 d3eeb7367b88896b276609771369244104a53155ba9fedcbacdb33adbcb3ab59a3c85472df8ad4546d69860a88c627a86772fff7f1f7fedd42a0b9a854fdead1
- SSDEEP 98304:Su5x6M1WoDDtu5x6M1WoDDCu5x6M1WoDDtu5x6M1WoDDchx0z:Ji8yi8Zi8yi8UKz
- TLSH T1E9A69D9172E00076E16E4530876A9735D7F6BC625B90C7CFD6C2FA1A2E327C06A36727
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry