General
- Target 2026-07-03_9e1c88dc13fa1cc64e7554e3c2ca22ba_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 18.3MB
- Sample260703-ra5vmafv8l
- SHA256 4b9cc66058792ae048215ed2d156f5ffb4f08d72a4b492594a36cb430c960c42
- MD5 9e1c88dc13fa1cc64e7554e3c2ca22ba
- SHA1 31760c1d7b566ebe690c0013769343a279d9a374
- SHA512 0d3d700b0033277d0af38310ba69ca7ac3d56913722a0ee697d37f5c8c43eb720184bfdee96dd56ec58cdcc21177c898bf0c213ca953287d1a7c22c0c486af09
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0eolySWyZ/K0ttYVAAT1Kmd0eolGly:zyZ/K0ttYZTEq0WyZ/K0ttYZTEq0Ml
- TLSH T111177D03F2A441E9E06AD174CE669231DB327C594BF1A6EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_9e1c88dc13fa1cc64e7554e3c2ca22ba_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_9e1c88dc13fa1cc64e7554e3c2ca22ba_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_9e1c88dc13fa1cc64e7554e3c2ca22ba_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 18.3MB
- SHA256 4b9cc66058792ae048215ed2d156f5ffb4f08d72a4b492594a36cb430c960c42
- MD5 9e1c88dc13fa1cc64e7554e3c2ca22ba
- SHA1 31760c1d7b566ebe690c0013769343a279d9a374
- SHA512 0d3d700b0033277d0af38310ba69ca7ac3d56913722a0ee697d37f5c8c43eb720184bfdee96dd56ec58cdcc21177c898bf0c213ca953287d1a7c22c0c486af09
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0eolySWyZ/K0ttYVAAT1Kmd0eolGly:zyZ/K0ttYZTEq0WyZ/K0ttYZTEq0Ml
- TLSH T111177D03F2A441E9E06AD174CE669231DB327C594BF1A6EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry