General
- Target 2026-07-05_69c0dd911cd46957acc972968c23c9d0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 20.7MB
- Sample260705-ebadwshs71
- SHA256 07fcc7251744eb4fd2471aa984ecf2d07f25a1e9e0742a79f33645c3fd91cb84
- MD5 69c0dd911cd46957acc972968c23c9d0
- SHA1 3174b64e7bf73fe26f917c9db7297b6382894384
- SHA512 b52499eb700833c111e9d0c7d5e340178369fa3c08aef90bf73d75dc11977fc1b26c6072946c37c8668f78bf9fee9d32b6e3774fe4f09056cce676fe0a634ee4
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+FGbSSWyZ/K0ttYVAAT1Kmd0x/h1+FGbHKz:zyZ/K0ttYZTEqJyZ/K0ttYZTEqyK
- TLSH T187276B13F2A540A9D06AD174CF668232DB727C594BF1A6EF2240B6D52F33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_69c0dd911cd46957acc972968c23c9d0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_69c0dd911cd46957acc972968c23c9d0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_69c0dd911cd46957acc972968c23c9d0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 20.7MB
- SHA256 07fcc7251744eb4fd2471aa984ecf2d07f25a1e9e0742a79f33645c3fd91cb84
- MD5 69c0dd911cd46957acc972968c23c9d0
- SHA1 3174b64e7bf73fe26f917c9db7297b6382894384
- SHA512 b52499eb700833c111e9d0c7d5e340178369fa3c08aef90bf73d75dc11977fc1b26c6072946c37c8668f78bf9fee9d32b6e3774fe4f09056cce676fe0a634ee4
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+FGbSSWyZ/K0ttYVAAT1Kmd0x/h1+FGbHKz:zyZ/K0ttYZTEqJyZ/K0ttYZTEqyK
- TLSH T187276B13F2A540A9D06AD174CF668232DB727C594BF1A6EF2240B6D52F33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry