General
- Target 2026-06-28_c1193448ef775fdb84f76c78c7cd597b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 4.1MB
- Sample260628-x188mact5x
- SHA256 ff68dd7b3d91d406a8a59dedcb804ba40ab4fc1c55150dc016ab2160e6b015ac
- MD5 c1193448ef775fdb84f76c78c7cd597b
- SHA1 3111d5667f50e983e780d156969291a137bfbfc9
- SHA512 8126db7b023e95f942378e0b51c819c6401fe72f477e2a33fbd3f77d356b90506a1b7a59b250d9f5693f17c05efad59a368d401805244289ca47d2aeb879403b
- SSDEEP 49152:tYRw5x6M1d+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyuVO88hXl+:Su5x6M1Y0oAaldmdmnpp/h1+
- TLSH T1C1166B13B19441A9D166C034CE86D635EB327C494BF196EB3281BBD93E37AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_c1193448ef775fdb84f76c78c7cd597b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_c1193448ef775fdb84f76c78c7cd597b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_c1193448ef775fdb84f76c78c7cd597b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 4.1MB
- SHA256 ff68dd7b3d91d406a8a59dedcb804ba40ab4fc1c55150dc016ab2160e6b015ac
- MD5 c1193448ef775fdb84f76c78c7cd597b
- SHA1 3111d5667f50e983e780d156969291a137bfbfc9
- SHA512 8126db7b023e95f942378e0b51c819c6401fe72f477e2a33fbd3f77d356b90506a1b7a59b250d9f5693f17c05efad59a368d401805244289ca47d2aeb879403b
- SSDEEP 49152:tYRw5x6M1d+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyuVO88hXl+:Su5x6M1Y0oAaldmdmnpp/h1+
- TLSH T1C1166B13B19441A9D166C034CE86D635EB327C494BF196EB3281BBD93E37AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry