General
- Target 2026-07-02_67ae3deadc6b263802e5a94a354cfc66_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 20.5MB
- Sample260702-g2pmlscw8s
- SHA256 7dd1d2a3a8b46e2a65b6ec3d0a8b4ddea586cfe811d821c2e5b64976be6de50a
- MD5 67ae3deadc6b263802e5a94a354cfc66
- SHA1 6d74706951ec33f98fdad98c4b72ccd96e31dabf
- SHA512 2f8016f2bbca596ca8228c380214ee0cd1cb11ab9d90ec026a0a65ad6a036f897eca8e9a4fc350285ab8ef49552597be0384167cd6bf227a61d0dba1f3399d1e
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09oiXSWyZ/K0ttYVAAT1Kmd09oiWKz:zyZ/K0ttYZTEqTcyZ/K0ttYZTEqTjK
- TLSH T1BB277C13F2E441A9E0AAD174CF669231EB727C494BF195DF2240B6D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_67ae3deadc6b263802e5a94a354cfc66_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_67ae3deadc6b263802e5a94a354cfc66_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_67ae3deadc6b263802e5a94a354cfc66_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 20.5MB
- SHA256 7dd1d2a3a8b46e2a65b6ec3d0a8b4ddea586cfe811d821c2e5b64976be6de50a
- MD5 67ae3deadc6b263802e5a94a354cfc66
- SHA1 6d74706951ec33f98fdad98c4b72ccd96e31dabf
- SHA512 2f8016f2bbca596ca8228c380214ee0cd1cb11ab9d90ec026a0a65ad6a036f897eca8e9a4fc350285ab8ef49552597be0384167cd6bf227a61d0dba1f3399d1e
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09oiXSWyZ/K0ttYVAAT1Kmd09oiWKz:zyZ/K0ttYZTEqTcyZ/K0ttYZTEqTjK
- TLSH T1BB277C13F2E441A9E0AAD174CF669231EB727C494BF195DF2240B6D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application