General
- Target 2026-07-01_16d5afcf45d36a75fffa838e3ed69530_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 10.3MB
- Sample260701-ypsbeady6q
- SHA256 5ee9b602beb0f10da6d7035258c33732a298f01a2e3cdb3dd12831c796b3cd47
- MD5 16d5afcf45d36a75fffa838e3ed69530
- SHA1 27683a0a9a7be79d8c6345a7d593dd74d39e254d
- SHA512 0de9d70e895e4ba2c09a548bb21d38dbb4986d8f2870aa29d5706a7cafe4d7ea65899979cb3f086578b50141262e248a7fb983c7e630ba866434360f9435f5de
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp7jo1ezSC6v2XMHzx/h1+:JSWyZ/K0ttYVAAT1Kmd09ois/h1+
- TLSH T17EB67C13F2E841A5E0A6D174CEA69635EB327C494BF195DF2240B7D82E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_16d5afcf45d36a75fffa838e3ed69530_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_16d5afcf45d36a75fffa838e3ed69530_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_16d5afcf45d36a75fffa838e3ed69530_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 10.3MB
- SHA256 5ee9b602beb0f10da6d7035258c33732a298f01a2e3cdb3dd12831c796b3cd47
- MD5 16d5afcf45d36a75fffa838e3ed69530
- SHA1 27683a0a9a7be79d8c6345a7d593dd74d39e254d
- SHA512 0de9d70e895e4ba2c09a548bb21d38dbb4986d8f2870aa29d5706a7cafe4d7ea65899979cb3f086578b50141262e248a7fb983c7e630ba866434360f9435f5de
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp7jo1ezSC6v2XMHzx/h1+:JSWyZ/K0ttYVAAT1Kmd09ois/h1+
- TLSH T17EB67C13F2E841A5E0A6D174CEA69635EB327C494BF195DF2240B7D82E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry