General
- Target 2026-07-03_7ef20b7371a6badb6977864054a4d0de_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 9.2MB
- Sample260703-he2t4acw7z
- SHA256 5891baac5384092a29229ab221d766432e96587ff899e964f2654574e907eb6f
- MD5 7ef20b7371a6badb6977864054a4d0de
- SHA1 d388b1d9a6a52bb9490ad010bc2e0f9396e4ec61
- SHA512 d59b6047adb7bc61ce60759c9223c1b536c1b434fc8023e8a1f3a2b7ddb0dc06bd36687607d912db6d44d51c51c19023327befa978d083396458345eced883f9
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp+jolB/h1+:JSWyZ/K0ttYVAAT1Kmd0eolB/h1+
- TLSH T18CA67C13F1A441E9E06AD174CE669631EB327C494BF1A6EF3240B6D42E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_7ef20b7371a6badb6977864054a4d0de_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_7ef20b7371a6badb6977864054a4d0de_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_7ef20b7371a6badb6977864054a4d0de_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 9.2MB
- SHA256 5891baac5384092a29229ab221d766432e96587ff899e964f2654574e907eb6f
- MD5 7ef20b7371a6badb6977864054a4d0de
- SHA1 d388b1d9a6a52bb9490ad010bc2e0f9396e4ec61
- SHA512 d59b6047adb7bc61ce60759c9223c1b536c1b434fc8023e8a1f3a2b7ddb0dc06bd36687607d912db6d44d51c51c19023327befa978d083396458345eced883f9
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp+jolB/h1+:JSWyZ/K0ttYVAAT1Kmd0eolB/h1+
- TLSH T18CA67C13F1A441E9E06AD174CE669631EB327C494BF1A6EF3240B6D42E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry