General
- Target 2026-07-03_30d69014e4be3e336562f537a5bf66ed_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 19.7MB
- Sample260703-e3nqlags7n
- SHA256 2d36b45f43e867fb067cffc62eae6927d0317e0e2fcde1a0c2199e3d1fc326aa
- MD5 30d69014e4be3e336562f537a5bf66ed
- SHA1 c3e74da071b9144cd0f140c93f5dcc6d9576b06a
- SHA512 a40ff68d6c7f5d6284ff7bd27ade7dbfdb19e83084c9ccaecbf0ae693847e03123111ffa620116399d33f040e99134e59b89d7eeb903fc364f12e72f1e049df8
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0eolySWyZ/K0ttYVAAT1Kmd0eol52Vh:zyZ/K0ttYZTEq0WyZ/K0ttYZTEq0Pe
- TLSH T1E9277C03F2A541E9E05AD174CE669231EB327C494BF1A6EF328076D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_30d69014e4be3e336562f537a5bf66ed_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_30d69014e4be3e336562f537a5bf66ed_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_30d69014e4be3e336562f537a5bf66ed_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 19.7MB
- SHA256 2d36b45f43e867fb067cffc62eae6927d0317e0e2fcde1a0c2199e3d1fc326aa
- MD5 30d69014e4be3e336562f537a5bf66ed
- SHA1 c3e74da071b9144cd0f140c93f5dcc6d9576b06a
- SHA512 a40ff68d6c7f5d6284ff7bd27ade7dbfdb19e83084c9ccaecbf0ae693847e03123111ffa620116399d33f040e99134e59b89d7eeb903fc364f12e72f1e049df8
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0eolySWyZ/K0ttYVAAT1Kmd0eol52Vh:zyZ/K0ttYZTEq0WyZ/K0ttYZTEq0Pe
- TLSH T1E9277C03F2A541E9E05AD174CE669231EB327C494BF1A6EF328076D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry