General
- Target 2026-06-27_0488a61cd2b04a8735d03239c80141b5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 40.3MB
- Sample260629-mljdjsay8s
- SHA256 835cb609ac40435c06df0957eb5e41cf3172a28b383550a531788b3abcaae150
- MD5 0488a61cd2b04a8735d03239c80141b5
- SHA1 c913b5ff9d46898e4f5d3935d1a3a1bbcda73ddf
- SHA512 6ffa89d30f5cd58c4d96474dde99d521cc28aba7115f758e918d080aef96c4a03af51e1abe71be1722c11f457890ae314b7dcc0891a17643db9ffd74078d2074
- SSDEEP 786432:zyZ/K0ttYZTEqsyZ/K0ttYZTEqyl7yZ/K0ttYZTEqsyZ/K0ttYZTEqyl6A:uZ/K0ttYREq3Z/K0ttYREqylmZ/K0ttk
- TLSH T123977D13F6A440E9E06AD174CE668631EB327C494BF1A5DF2240B6D92F37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_0488a61cd2b04a8735d03239c80141b5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_0488a61cd2b04a8735d03239c80141b5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_0488a61cd2b04a8735d03239c80141b5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 40.3MB
- SHA256 835cb609ac40435c06df0957eb5e41cf3172a28b383550a531788b3abcaae150
- MD5 0488a61cd2b04a8735d03239c80141b5
- SHA1 c913b5ff9d46898e4f5d3935d1a3a1bbcda73ddf
- SHA512 6ffa89d30f5cd58c4d96474dde99d521cc28aba7115f758e918d080aef96c4a03af51e1abe71be1722c11f457890ae314b7dcc0891a17643db9ffd74078d2074
- SSDEEP 786432:zyZ/K0ttYZTEqsyZ/K0ttYZTEqyl7yZ/K0ttYZTEqsyZ/K0ttYZTEqyl6A:uZ/K0ttYREq3Z/K0ttYREqylmZ/K0ttk
- TLSH T123977D13F6A440E9E06AD174CE668631EB327C494BF1A5DF2240B6D92F37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry