General
- Target 2026-07-03_cf0fddb79d510727d6a281c59d38ea70_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 21.1MB
- Sample260703-g7ve2scv5v
- SHA256 79abab5755580f78e9a1394fd5c7210b96f0b1e191c67141132c0aabb4e249c9
- MD5 cf0fddb79d510727d6a281c59d38ea70
- SHA1 d19cc7bc05eded98181495b486a2cc6b031f5bea
- SHA512 6012fb42fe423c1d5063a26248b8ca920b4b0ab9c6b240d2de670e455190cd2d5c32dc22f7e2cbe37fe1d4207d04bef45975441958be70841203df2b363b675b
- SSDEEP 393216:zyZ/K0ttYZTEq0WyZ/K0ttYZTEq0NWqQjp3:zyZ/K0ttYZTEq0WyZ/K0ttYZTEq0YfjF
- TLSH T124277C03F2E941E9E06AD174CE669231DB327C494BF1A6EF224076D52E73AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_cf0fddb79d510727d6a281c59d38ea70_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_cf0fddb79d510727d6a281c59d38ea70_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_cf0fddb79d510727d6a281c59d38ea70_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 21.1MB
- SHA256 79abab5755580f78e9a1394fd5c7210b96f0b1e191c67141132c0aabb4e249c9
- MD5 cf0fddb79d510727d6a281c59d38ea70
- SHA1 d19cc7bc05eded98181495b486a2cc6b031f5bea
- SHA512 6012fb42fe423c1d5063a26248b8ca920b4b0ab9c6b240d2de670e455190cd2d5c32dc22f7e2cbe37fe1d4207d04bef45975441958be70841203df2b363b675b
- SSDEEP 393216:zyZ/K0ttYZTEq0WyZ/K0ttYZTEq0NWqQjp3:zyZ/K0ttYZTEq0WyZ/K0ttYZTEq0YfjF
- TLSH T124277C03F2E941E9E06AD174CE669231DB327C494BF1A6EF224076D52E73AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry