General
- Target 2026-07-02_74eb0b017a37cd8923693dddb20db8cf_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 10.3MB
- Sample260702-vxa6bafy2r
- SHA256 418b99f0200c04743d18e7a306dec425f461bdc2624585af9773bba0413b1661
- MD5 74eb0b017a37cd8923693dddb20db8cf
- SHA1 adfb16d71a156de4db9b21fa37c7d90e4db96d16
- SHA512 1f4bc649202aa733f8d966b7215b3d8aa534f25623e6e80301a8e217bc9326ae0c45600d3a0183906bd5018e9b7b7618e0881a15adbd2e42f9f8fbca8d61acc1
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTPezSC6v2XMHqu5x6M1uWQtZ/K0tGOFWVRuLE:JSWyZ/K0ttYVAATU0SWyZ/K0ttYVAATT
- TLSH T1E0B67B13F1A541E9E0AAD178CF669331EB327C494BF1A5DF2240A6D42E37AD07B38725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_74eb0b017a37cd8923693dddb20db8cf_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_74eb0b017a37cd8923693dddb20db8cf_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_74eb0b017a37cd8923693dddb20db8cf_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 10.3MB
- SHA256 418b99f0200c04743d18e7a306dec425f461bdc2624585af9773bba0413b1661
- MD5 74eb0b017a37cd8923693dddb20db8cf
- SHA1 adfb16d71a156de4db9b21fa37c7d90e4db96d16
- SHA512 1f4bc649202aa733f8d966b7215b3d8aa534f25623e6e80301a8e217bc9326ae0c45600d3a0183906bd5018e9b7b7618e0881a15adbd2e42f9f8fbca8d61acc1
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTPezSC6v2XMHqu5x6M1uWQtZ/K0tGOFWVRuLE:JSWyZ/K0ttYVAATU0SWyZ/K0ttYVAATT
- TLSH T1E0B67B13F1A541E9E0AAD178CF669331EB327C494BF1A5DF2240A6D42E37AD07B38725
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry