General
- Target 2026-06-26_c4236b730a351bdb2a6d98bed7250afc_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 37.9MB
- Sample260629-pp3mpsdv2t
- SHA256 1f61843573070f357d72650e9e06d22111793616fe3c2cb470ee57cc115443bd
- MD5 c4236b730a351bdb2a6d98bed7250afc
- SHA1 e6531f0779f21fa0b7299c89a1d095e899f14594
- SHA512 8dd2c099ca46fada7df999381cd1f3d555702a641d50dcb3d0c83495f04711fb3a23cc50370738e75c727f576c92852cab53298dd3d653fd0b79c598c4d822a4
- SSDEEP 786432:zyZ/K0ttYZTEqoyZ/K0ttYZTEqKokyZ/K0ttYZTEqoyZ/K0ttYZTEqKo+:uZ/K0ttYREqDZ/K0ttYREqK+Z/K0ttYZ
- TLSH T1BD977B13F2A441E9E06AD174CF668231DB727C594BF1A6EF2240B6D52E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_c4236b730a351bdb2a6d98bed7250afc_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_c4236b730a351bdb2a6d98bed7250afc_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_c4236b730a351bdb2a6d98bed7250afc_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 37.9MB
- SHA256 1f61843573070f357d72650e9e06d22111793616fe3c2cb470ee57cc115443bd
- MD5 c4236b730a351bdb2a6d98bed7250afc
- SHA1 e6531f0779f21fa0b7299c89a1d095e899f14594
- SHA512 8dd2c099ca46fada7df999381cd1f3d555702a641d50dcb3d0c83495f04711fb3a23cc50370738e75c727f576c92852cab53298dd3d653fd0b79c598c4d822a4
- SSDEEP 786432:zyZ/K0ttYZTEqoyZ/K0ttYZTEqKokyZ/K0ttYZTEqoyZ/K0ttYZTEqKo+:uZ/K0ttYREqDZ/K0ttYREqK+Z/K0ttYZ
- TLSH T1BD977B13F2A441E9E06AD174CF668231DB727C594BF1A6EF2240B6D52E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application