General
- Target 2026-07-05_69ea10bc8fdad87ea11a30a62c5b26ed_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 10.4MB
- Sample260705-ftypwadv7p
- SHA256 52883500d6b1d438dcd971cce7bd82ede2bfedf20c1e4c3def8453762640ac26
- MD5 69ea10bc8fdad87ea11a30a62c5b26ed
- SHA1 de4309c593882cfbe35cf12ce9aec6dc8623714d
- SHA512 297cbfc4fafbffd363ce9da0f8a451a8bf93b91ccbadb8350b35d4e6e264dd2d608ce8cbb1019e51ce45cc9693962f62aeea2e2bf4078650d2daf03d8bce9665
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+FGbh/h1+:zyZ/K0ttYZTEq
- TLSH T1BEB67D03F2A441E9D06AD174CE669632EB727C4947F1A6DF2240B6D92F33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_69ea10bc8fdad87ea11a30a62c5b26ed_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_69ea10bc8fdad87ea11a30a62c5b26ed_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_69ea10bc8fdad87ea11a30a62c5b26ed_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 10.4MB
- SHA256 52883500d6b1d438dcd971cce7bd82ede2bfedf20c1e4c3def8453762640ac26
- MD5 69ea10bc8fdad87ea11a30a62c5b26ed
- SHA1 de4309c593882cfbe35cf12ce9aec6dc8623714d
- SHA512 297cbfc4fafbffd363ce9da0f8a451a8bf93b91ccbadb8350b35d4e6e264dd2d608ce8cbb1019e51ce45cc9693962f62aeea2e2bf4078650d2daf03d8bce9665
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+FGbh/h1+:zyZ/K0ttYZTEq
- TLSH T1BEB67D03F2A441E9D06AD174CE669632EB727C4947F1A6DF2240B6D92F33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry