General
- Target 2026-06-27_b4157cf57350e8d7923c9c616e507a3b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 8.9MB
- Sample260629-d9215acv2y
- SHA256 2f308fb6bcb7d7cf99eccb6c909d19f2bb8c92d7f4e89ee09eb21fe1272f05d8
- MD5 b4157cf57350e8d7923c9c616e507a3b
- SHA1 a7f62ff0ba470339d89075a1f15d20e96f6b742e
- SHA512 02ef7a4bc3d34d8d8331feb0c2f4bfcd6e44abfa67ae4eeb2729eb0aabe04675d96a29d9a92a97ded4702fa33d81242ed64706e2b7939c5bc45d15296873b782
- SSDEEP 98304:Su5x6M1WoDDklhu5x6M1WoDDkl7q9ceq9+2xl/SSay+:Ji8koi8k5WqQI0py+
- TLSH T13F967C03F2E500A9E0AE9274D7359731BA73BC525B6196CF12C0F6292F72BC05A79763
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_b4157cf57350e8d7923c9c616e507a3b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_b4157cf57350e8d7923c9c616e507a3b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_b4157cf57350e8d7923c9c616e507a3b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 8.9MB
- SHA256 2f308fb6bcb7d7cf99eccb6c909d19f2bb8c92d7f4e89ee09eb21fe1272f05d8
- MD5 b4157cf57350e8d7923c9c616e507a3b
- SHA1 a7f62ff0ba470339d89075a1f15d20e96f6b742e
- SHA512 02ef7a4bc3d34d8d8331feb0c2f4bfcd6e44abfa67ae4eeb2729eb0aabe04675d96a29d9a92a97ded4702fa33d81242ed64706e2b7939c5bc45d15296873b782
- SSDEEP 98304:Su5x6M1WoDDklhu5x6M1WoDDkl7q9ceq9+2xl/SSay+:Ji8koi8k5WqQI0py+
- TLSH T13F967C03F2E500A9E0AE9274D7359731BA73BC525B6196CF12C0F6292F72BC05A79763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry