General
- Target 2026-07-06_951bd54c51ab23f528b1ffcb844dbcba_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 21.3MB
- Sample260707-cmc8tacy9m
- SHA256 b7ac5c58de41da5e421891620495afbb7e0336e9c10c41d570d0a03a9ca89f11
- MD5 951bd54c51ab23f528b1ffcb844dbcba
- SHA1 3310e1ff9b511a414300a1d82d9acb9f7a788cf2
- SHA512 2954236b43bd0c408787c481b1ba0b1f40846199d5fc37696b9d6deb2a4fecfc32b164cd6eb5a6f3f85beea0a8080a209a19a85cd640a7f9ede9c9f33c399d03
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+FGbG0SWyZ/K0ttYVAAT1Kmd0x/h1+FGbG+:zyZ/K0ttYZTEqayZ/K0ttYZTEq6
- TLSH T17E277D03F2A841A9D06AD178CE669632EB727C4947F195DF2240B7D92F33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_951bd54c51ab23f528b1ffcb844dbcba_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_951bd54c51ab23f528b1ffcb844dbcba_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_951bd54c51ab23f528b1ffcb844dbcba_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 21.3MB
- SHA256 b7ac5c58de41da5e421891620495afbb7e0336e9c10c41d570d0a03a9ca89f11
- MD5 951bd54c51ab23f528b1ffcb844dbcba
- SHA1 3310e1ff9b511a414300a1d82d9acb9f7a788cf2
- SHA512 2954236b43bd0c408787c481b1ba0b1f40846199d5fc37696b9d6deb2a4fecfc32b164cd6eb5a6f3f85beea0a8080a209a19a85cd640a7f9ede9c9f33c399d03
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+FGbG0SWyZ/K0ttYVAAT1Kmd0x/h1+FGbG+:zyZ/K0ttYZTEqayZ/K0ttYZTEq6
- TLSH T17E277D03F2A841A9D06AD178CE669632EB727C4947F195DF2240B7D92F33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application