General
- Target 2026-06-28_551f06ce31f664de515e632d997fa738_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 4.8MB
- Sample260628-2hba4afw4w
- SHA256 f27281b06802126f74d04a1766be8eb1858c9bc103d41b5f26fc903003313230
- MD5 551f06ce31f664de515e632d997fa738
- SHA1 8a6e3563df831da7efab7a7881e995f56ab52391
- SHA512 fcf56232cf8ecb9d091e718417c10892331452dcb957989742550a134a4b2f582bfbc8b4b4082687bfef6ba9bc98739b02dfccf27772c38df315aee6bc4a4a28
- SSDEEP 49152:tYRw5x6M1d+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyuVO88hXl+AVOO:Su5x6M1Y0oAaldmdmnpp/h1+X/h1+
- TLSH T16B366C13F1A481A5D066C074CD869635EB327C4947F196EB3281BBD93E37AD0BB3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_551f06ce31f664de515e632d997fa738_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_551f06ce31f664de515e632d997fa738_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_551f06ce31f664de515e632d997fa738_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 4.8MB
- SHA256 f27281b06802126f74d04a1766be8eb1858c9bc103d41b5f26fc903003313230
- MD5 551f06ce31f664de515e632d997fa738
- SHA1 8a6e3563df831da7efab7a7881e995f56ab52391
- SHA512 fcf56232cf8ecb9d091e718417c10892331452dcb957989742550a134a4b2f582bfbc8b4b4082687bfef6ba9bc98739b02dfccf27772c38df315aee6bc4a4a28
- SSDEEP 49152:tYRw5x6M1d+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyuVO88hXl+AVOO:Su5x6M1Y0oAaldmdmnpp/h1+X/h1+
- TLSH T16B366C13F1A481A5D066C074CD869635EB327C4947F196EB3281BBD93E37AD0BB3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry