General
- Target 2026-07-01_dd01485cbcfc1e49e40854dedaaca6fa_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 13.2MB
- Sample260701-wwl2vsbz2m
- SHA256 5df118e3805bf1b221207886bccbcb8abc14d4d04c731003f3945c55ad6d1e23
- MD5 dd01485cbcfc1e49e40854dedaaca6fa
- SHA1 4ac0abf9be6bbf8f5bbf64b54aa5c81de456b6ca
- SHA512 f21189c3ce42f97c0e0d001f1b172a6a4ca4283172f821b1ae9e42c1bc8b5d10c3021376c3321e5b1b661683cffe57373daa382c0b3346fd27cc1ec8d6d7eb9c
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qlTu5x6M1WoDDklJ6qCu5x6M1WoDDklJr:Qi8kLri8kL7ci8kLri8kL7O/h1+
- TLSH T109E69E02B6E44179E17E8634D6769636EA72BC420B21D7CF56D4F62E2E337C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_dd01485cbcfc1e49e40854dedaaca6fa_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_dd01485cbcfc1e49e40854dedaaca6fa_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_dd01485cbcfc1e49e40854dedaaca6fa_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 13.2MB
- SHA256 5df118e3805bf1b221207886bccbcb8abc14d4d04c731003f3945c55ad6d1e23
- MD5 dd01485cbcfc1e49e40854dedaaca6fa
- SHA1 4ac0abf9be6bbf8f5bbf64b54aa5c81de456b6ca
- SHA512 f21189c3ce42f97c0e0d001f1b172a6a4ca4283172f821b1ae9e42c1bc8b5d10c3021376c3321e5b1b661683cffe57373daa382c0b3346fd27cc1ec8d6d7eb9c
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJ6qlTu5x6M1WoDDklJ6qCu5x6M1WoDDklJr:Qi8kLri8kL7ci8kLri8kL7O/h1+
- TLSH T109E69E02B6E44179E17E8634D6769636EA72BC420B21D7CF56D4F62E2E337C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry