General
- Target 2026-07-05_5c301a0b2d1ac0b1f81bbc79b199fca2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 15.9MB
- Sample260705-eb878acy6r
- SHA256 40a8e1f9fe7e2f93a7c5a1a97c815a5b73c043b593873b388d5ff9cbedbc0834
- MD5 5c301a0b2d1ac0b1f81bbc79b199fca2
- SHA1 247bad8b9574f02ed06152b90e0e9cee8ec7b366
- SHA512 44ea2dae20dd2c3d8906f2fd499161545f86681a9cca22fba3ada514770f697a297c19e4bfc9c136c8d0b9534ffa9d8d3c91382ea905888c8b08c55afbea9d2f
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDkl0u5x6M1WoDDklJ6qCu5x6M1WoDDklXq9ceW:Qi8kLri8kBi8kLri8kZWqQI0pyC
- TLSH T116F69F03F6E54169F0BAC674D6769732EE72BC425B21D6CF1284F6192E72BC09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_5c301a0b2d1ac0b1f81bbc79b199fca2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_5c301a0b2d1ac0b1f81bbc79b199fca2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_5c301a0b2d1ac0b1f81bbc79b199fca2_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 15.9MB
- SHA256 40a8e1f9fe7e2f93a7c5a1a97c815a5b73c043b593873b388d5ff9cbedbc0834
- MD5 5c301a0b2d1ac0b1f81bbc79b199fca2
- SHA1 247bad8b9574f02ed06152b90e0e9cee8ec7b366
- SHA512 44ea2dae20dd2c3d8906f2fd499161545f86681a9cca22fba3ada514770f697a297c19e4bfc9c136c8d0b9534ffa9d8d3c91382ea905888c8b08c55afbea9d2f
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDkl0u5x6M1WoDDklJ6qCu5x6M1WoDDklXq9ceW:Qi8kLri8kBi8kLri8kZWqQI0pyC
- TLSH T116F69F03F6E54169F0BAC674D6769732EE72BC425B21D6CF1284F6192E72BC09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry