General
- Target 2026-07-07_42eb5a1dfcc8e78c5c739753b984dc43_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 34.0MB
- Sample260707-3dapfagw8r
- SHA256 9fdca341810615c1cc76c1fb365739d4111b0cff7756eb7ec8898c9a41cc0d36
- MD5 42eb5a1dfcc8e78c5c739753b984dc43
- SHA1 78870057af65205d1e0443f4c21794ce7a2e4025
- SHA512 2c0ed6a660093df135393bc21c3e2e5f6923d44482d158ad9d2b8e6a60d9933c7da2c409a20244fee362392f8b2f80a83e3f6db6071cf7a5345144e296930f70
- SSDEEP 196608:Jw/h1+Qw/h1+gwXw/h1+Qw/h1+gwew/h1+Qw/h1+gwXw/h1+Qw/h1+gwBoKLw/hS:hw3wyw3wBoOw3wyw3wBoH
- TLSH T138779E96F5A481B5D072C075C4D6A77AEA327C421B308BCB5346FB2C2E376D19A36732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_42eb5a1dfcc8e78c5c739753b984dc43_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_42eb5a1dfcc8e78c5c739753b984dc43_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_42eb5a1dfcc8e78c5c739753b984dc43_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 34.0MB
- SHA256 9fdca341810615c1cc76c1fb365739d4111b0cff7756eb7ec8898c9a41cc0d36
- MD5 42eb5a1dfcc8e78c5c739753b984dc43
- SHA1 78870057af65205d1e0443f4c21794ce7a2e4025
- SHA512 2c0ed6a660093df135393bc21c3e2e5f6923d44482d158ad9d2b8e6a60d9933c7da2c409a20244fee362392f8b2f80a83e3f6db6071cf7a5345144e296930f70
- SSDEEP 196608:Jw/h1+Qw/h1+gwXw/h1+Qw/h1+gwew/h1+Qw/h1+gwXw/h1+Qw/h1+gwBoKLw/hS:hw3wyw3wBoOw3wyw3wBoH
- TLSH T138779E96F5A481B5D072C075C4D6A77AEA327C421B308BCB5346FB2C2E376D19A36732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry