General
- Target 2026-07-05_d1161a5782b813112b4b417d8dd20a73_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.9MB
- Sample260705-dz4f7scw8n
- SHA256 d9a98107216c1998f8ffb64a99e9102bf69ffeae07a1d94db8125e960cf687aa
- MD5 d1161a5782b813112b4b417d8dd20a73
- SHA1 482c866e480b0f64714f7d84f94c510dfa938047
- SHA512 03e54138115cc2369e93bc88eac10375bc2480702c25064097f026a249b901b05591ae164e85f33ff0c3c09d3248849aac72de1660249a6c17a53bc3fbd8d68c
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDkl0u5x6M1WoDDklJ6qCu5x6M1WoDDklBhx0zg:Qi8kLri8kBi8kLri8kpKz9/h1+
- TLSH T1CFD69F0276E5407AE17E8630D7769631DAB2BC524B21C7CF96C4F61E2E727C0AA35327
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_d1161a5782b813112b4b417d8dd20a73_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_d1161a5782b813112b4b417d8dd20a73_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_d1161a5782b813112b4b417d8dd20a73_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 12.9MB
- SHA256 d9a98107216c1998f8ffb64a99e9102bf69ffeae07a1d94db8125e960cf687aa
- MD5 d1161a5782b813112b4b417d8dd20a73
- SHA1 482c866e480b0f64714f7d84f94c510dfa938047
- SHA512 03e54138115cc2369e93bc88eac10375bc2480702c25064097f026a249b901b05591ae164e85f33ff0c3c09d3248849aac72de1660249a6c17a53bc3fbd8d68c
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDkl0u5x6M1WoDDklJ6qCu5x6M1WoDDklBhx0zg:Qi8kLri8kBi8kLri8kpKz9/h1+
- TLSH T1CFD69F0276E5407AE17E8630D7769631DAB2BC524B21C7CF96C4F61E2E727C0AA35327
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry