General
- Target 2026-07-02_dd7c1d42a560a13c4350015b5c7d35b5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 20.4MB
- Sample260702-h9adbsb18m
- SHA256 0686efddb8fb5b37db396a39b60c9e52df15d0f7e8acef370bc4a61a7a18ff85
- MD5 dd7c1d42a560a13c4350015b5c7d35b5
- SHA1 aa7846d15814fcc75f6d6f2a9c02b7c95ba67752
- SHA512 58bb736c4321ad5476a3221928a93c400a8102477c1641c799cac6eca82024ef3a72e2e2f4aa02b85d0b73490d5c48317cb87f3dad63dd427bb46ce050da47f2
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09oiXSWyZ/K0ttYVAAT1Kmd09oi7ly:zyZ/K0ttYZTEqTcyZ/K0ttYZTEqTil
- TLSH T162277D13F2E841A9E0A6D174CE669631EB327C494BF195DF2240B7D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_dd7c1d42a560a13c4350015b5c7d35b5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_dd7c1d42a560a13c4350015b5c7d35b5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_dd7c1d42a560a13c4350015b5c7d35b5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 20.4MB
- SHA256 0686efddb8fb5b37db396a39b60c9e52df15d0f7e8acef370bc4a61a7a18ff85
- MD5 dd7c1d42a560a13c4350015b5c7d35b5
- SHA1 aa7846d15814fcc75f6d6f2a9c02b7c95ba67752
- SHA512 58bb736c4321ad5476a3221928a93c400a8102477c1641c799cac6eca82024ef3a72e2e2f4aa02b85d0b73490d5c48317cb87f3dad63dd427bb46ce050da47f2
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09oiXSWyZ/K0ttYVAAT1Kmd09oi7ly:zyZ/K0ttYZTEqTcyZ/K0ttYZTEqTil
- TLSH T162277D13F2E841A9E0A6D174CE669631EB327C494BF195DF2240B7D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry