General
- Target 2026-07-01_9bc07be3bd38cdf7a319c369bb5ddbb5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 16.8MB
- Sample260701-vcfv3acs5v
- SHA256 1898655ae8e9047058de00d13b97db0706d98e21a94aff1ae9c1b79406390030
- MD5 9bc07be3bd38cdf7a319c369bb5ddbb5
- SHA1 78bc113f554b78a4b3518799eb2ee71dd1961984
- SHA512 0182c4cd89c2b1b9374fef00fb415646b788ba4cae894c96af8dd12d754b3ac3a584e32a1819dd5c838d2cd43572904ab127ed109cb47232eded0ce3056eab28
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6q7GgHIKgM/u5x6M1WoDDklJ6qCu5x6M1M:Qi8kLri8kL5oKmi8kLri8kL5oKyr
- TLSH T1D9079E03B6E441B9E07FC53496669636EA72BC460B20D7CF5694F61E2E33BD09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_9bc07be3bd38cdf7a319c369bb5ddbb5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_9bc07be3bd38cdf7a319c369bb5ddbb5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_9bc07be3bd38cdf7a319c369bb5ddbb5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 16.8MB
- SHA256 1898655ae8e9047058de00d13b97db0706d98e21a94aff1ae9c1b79406390030
- MD5 9bc07be3bd38cdf7a319c369bb5ddbb5
- SHA1 78bc113f554b78a4b3518799eb2ee71dd1961984
- SHA512 0182c4cd89c2b1b9374fef00fb415646b788ba4cae894c96af8dd12d754b3ac3a584e32a1819dd5c838d2cd43572904ab127ed109cb47232eded0ce3056eab28
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6q7GgHIKgM/u5x6M1WoDDklJ6qCu5x6M1M:Qi8kLri8kL5oKmi8kLri8kL5oKyr
- TLSH T1D9079E03B6E441B9E07FC53496669636EA72BC460B20D7CF5694F61E2E33BD09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry