General
- Target 2026-07-06_e647d5827eee712f7455dd5676858efe_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 23.9MB
- Sample260707-amfylabt3m
- SHA256 d884874acfcaa9a0ea4d873520cece4f33bada44e75df82375f493f05c5cc08b
- MD5 e647d5827eee712f7455dd5676858efe
- SHA1 d6481e46acc35d360e6404419a7d9482d0d40ccf
- SHA512 c49c0f1387569adbe90c54ac631d521ca6886fb73851eaab75f62772f7e8e2b5552468457f5d70ac553214916d0717621dbba0fe91fe852cf3a5828ae8ec8bdc
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+FGbG0SWyZ/K0ttYVAAT1Kmd0x/h1+FGbGv2Vh:zyZ/K0ttYZTEqayZ/K0ttYZTEqTe
- TLSH T12C477D03F2A441E9D06AD174CE669632EB727C4947F1A6DF2240B6D92F33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_e647d5827eee712f7455dd5676858efe_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_e647d5827eee712f7455dd5676858efe_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_e647d5827eee712f7455dd5676858efe_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 23.9MB
- SHA256 d884874acfcaa9a0ea4d873520cece4f33bada44e75df82375f493f05c5cc08b
- MD5 e647d5827eee712f7455dd5676858efe
- SHA1 d6481e46acc35d360e6404419a7d9482d0d40ccf
- SHA512 c49c0f1387569adbe90c54ac631d521ca6886fb73851eaab75f62772f7e8e2b5552468457f5d70ac553214916d0717621dbba0fe91fe852cf3a5828ae8ec8bdc
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+FGbG0SWyZ/K0ttYVAAT1Kmd0x/h1+FGbGv2Vh:zyZ/K0ttYZTEqayZ/K0ttYZTEqTe
- TLSH T12C477D03F2A441E9D06AD174CE669632EB727C4947F1A6DF2240B6D92F33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry