General
- Target 2026-07-03_a23887a6a5f91663d89c9de9c3cdd4cc_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260703-c7emdaat9z
- SHA256 63d8b0aedb78539e14d75185f838fa081d4fbb51d32d319d5cc68ec6ab09f8af
- MD5 a23887a6a5f91663d89c9de9c3cdd4cc
- SHA1 654d735d74e1617f434e10aa7e4093daa47760cc
- SHA512 2dc144df7709f1100439396f2317113716295accb56aedf76287a33d52ddbece2865f36b7486407c90967881d25214ca12b93977d74839477e39ca2d837cf6ba
- SSDEEP 12288:GaoVmp+84Yp+E9UuFuUGx+zR5JeKsghPBOqwh7iuWXf:GDVmpz1pjk+hexgAjh7iuWXf
- TLSH T14AD46B1176D0CF31E2AF053299659AB85A7FBC208F2087CB63947E2DBE306C19A35757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_a23887a6a5f91663d89c9de9c3cdd4cc_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_a23887a6a5f91663d89c9de9c3cdd4cc_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_a23887a6a5f91663d89c9de9c3cdd4cc_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 63d8b0aedb78539e14d75185f838fa081d4fbb51d32d319d5cc68ec6ab09f8af
- MD5 a23887a6a5f91663d89c9de9c3cdd4cc
- SHA1 654d735d74e1617f434e10aa7e4093daa47760cc
- SHA512 2dc144df7709f1100439396f2317113716295accb56aedf76287a33d52ddbece2865f36b7486407c90967881d25214ca12b93977d74839477e39ca2d837cf6ba
- SSDEEP 12288:GaoVmp+84Yp+E9UuFuUGx+zR5JeKsghPBOqwh7iuWXf:GDVmpz1pjk+hexgAjh7iuWXf
- TLSH T14AD46B1176D0CF31E2AF053299659AB85A7FBC208F2087CB63947E2DBE306C19A35757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory