General
- Target 2026-06-27_0f1cee1582dfd50d78dae315c4f9ad84_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 17.0MB
- Sample260629-l3pffscv7k
- SHA256 f7fba6b215911b21a4e428334e5228d1c69fe0b3a08cf1ad7545d5dd2741fa23
- MD5 0f1cee1582dfd50d78dae315c4f9ad84
- SHA1 fe2863b43408f0be98b4260f92421587b96746b8
- SHA512 ab2e9d923e6adab193bc65a741ee9f9dce4df11d0d51b43e8410d817804ddf7c0f8ef9e0443e4bf0daadd882a89e6a5049640421ff48e90f0d89b2d4a64da04c
- SSDEEP 196608:Jw/h1+Qw/h1+gwXw/h1+Qw/h1+gwew/h1+Qw/h1+gwXw/h1+Qw/h1+gwBoK:hw3wyw3wBo
- TLSH T1B9079E96F5A481B5D072C075C4D6A77AEA327C421B308BCB5346FB2C2E376D19A36732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_0f1cee1582dfd50d78dae315c4f9ad84_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_0f1cee1582dfd50d78dae315c4f9ad84_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_0f1cee1582dfd50d78dae315c4f9ad84_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 17.0MB
- SHA256 f7fba6b215911b21a4e428334e5228d1c69fe0b3a08cf1ad7545d5dd2741fa23
- MD5 0f1cee1582dfd50d78dae315c4f9ad84
- SHA1 fe2863b43408f0be98b4260f92421587b96746b8
- SHA512 ab2e9d923e6adab193bc65a741ee9f9dce4df11d0d51b43e8410d817804ddf7c0f8ef9e0443e4bf0daadd882a89e6a5049640421ff48e90f0d89b2d4a64da04c
- SSDEEP 196608:Jw/h1+Qw/h1+gwXw/h1+Qw/h1+gwew/h1+Qw/h1+gwXw/h1+Qw/h1+gwBoK:hw3wyw3wBo
- TLSH T1B9079E96F5A481B5D072C075C4D6A77AEA327C421B308BCB5346FB2C2E376D19A36732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry