General
- Target 2026-06-27_de016369db2251fc28a0dce6b4946e93_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 17.5MB
- Sample260629-clys5ab17m
- SHA256 8457c2a8d532b192914e9b559f5f434fc048a99536f12691c949952c492f1379
- MD5 de016369db2251fc28a0dce6b4946e93
- SHA1 6289ad372b67a5f3f311d3160becd231b62b4eac
- SHA512 413ddf67af2ffc1045dc71a9542ed8707c5fdf2f36c10b0e42a264e1f25ddb37a8cb97fd562ca1c5815702ac6f92532e5633f8c0a58f133b90a6c7c9743a2930
- SSDEEP 196608:Jw/h1+Qw/h1+gwXw/h1+Qw/h1+gwew/h1+Qw/h1+gwXw/h1+Qw/h1+gwBoK3o:hw3wyw3wBox
- TLSH T1C9079E56F5A482B5D072C075C4D6A77AEA327C421B308BCB5346FB2C2E376D19A36732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_de016369db2251fc28a0dce6b4946e93_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_de016369db2251fc28a0dce6b4946e93_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_de016369db2251fc28a0dce6b4946e93_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 17.5MB
- SHA256 8457c2a8d532b192914e9b559f5f434fc048a99536f12691c949952c492f1379
- MD5 de016369db2251fc28a0dce6b4946e93
- SHA1 6289ad372b67a5f3f311d3160becd231b62b4eac
- SHA512 413ddf67af2ffc1045dc71a9542ed8707c5fdf2f36c10b0e42a264e1f25ddb37a8cb97fd562ca1c5815702ac6f92532e5633f8c0a58f133b90a6c7c9743a2930
- SSDEEP 196608:Jw/h1+Qw/h1+gwXw/h1+Qw/h1+gwew/h1+Qw/h1+gwXw/h1+Qw/h1+gwBoK3o:hw3wyw3wBox
- TLSH T1C9079E56F5A482B5D072C075C4D6A77AEA327C421B308BCB5346FB2C2E376D19A36732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry