General
- Target 2026-07-05_34841b587bad59ed249ed52b8cb19f60_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 11.6MB
- Sample260705-efe5yacz4k
- SHA256 7b23641ac8f25efa60b8722b81ff9c5c883e925d8cba2f4d1b52ecaf524f12c7
- MD5 34841b587bad59ed249ed52b8cb19f60
- SHA1 71ad9daac529842cb026d4bdb960c3f4dd46e898
- SHA512 1c12ea987c7352a0b2842b96e40d96b5764a870cf0465c43cc3baeef21cab5d7b523d96eb6c94ac33d74c6155032963fd267600f0eaf31b25cce340a78fa07e2
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDkl0u5x6M1WoDDklJ6qCu5x6M1WoDDkl2/h1+:Qi8kLri8kBi8kLri8k0/h1+
- TLSH T199C69E42B7E4417AF17B4A3095769636AA76BC820B11CBCF56D4F61E2E327C0DA35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_34841b587bad59ed249ed52b8cb19f60_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_34841b587bad59ed249ed52b8cb19f60_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_34841b587bad59ed249ed52b8cb19f60_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_remcos_vidar
- Size 11.6MB
- SHA256 7b23641ac8f25efa60b8722b81ff9c5c883e925d8cba2f4d1b52ecaf524f12c7
- MD5 34841b587bad59ed249ed52b8cb19f60
- SHA1 71ad9daac529842cb026d4bdb960c3f4dd46e898
- SHA512 1c12ea987c7352a0b2842b96e40d96b5764a870cf0465c43cc3baeef21cab5d7b523d96eb6c94ac33d74c6155032963fd267600f0eaf31b25cce340a78fa07e2
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDkl0u5x6M1WoDDklJ6qCu5x6M1WoDDkl2/h1+:Qi8kLri8kBi8kLri8k0/h1+
- TLSH T199C69E42B7E4417AF17B4A3095769636AA76BC820B11CBCF56D4F61E2E327C0DA35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry