General
- Target 2026-07-06_2924775379ca309bc979cb87e83ac2b9_amadey_cobalt-strike_fabookie_hijackloader_icedid_manuscrypt_njrat_rhadamanthys_satacom_stop_vidar
- Size 497KB
- Sample260707-fdaccah12t
- SHA256 672b2cda2c4325c22ccb487a4bfe2e729dda8e86b2ec2b9c2321d183656649ce
- MD5 2924775379ca309bc979cb87e83ac2b9
- SHA1 3b0eab80ee7e597aa3b40510574772a6b434f426
- SHA512 f83f088ef98ba648cba986bc98251e3fc078e60a1ffad495c36607440298d7880b0b444582edbfa03cb63fa5f99511fa1d25f4cf69e6bf721495003f517afd36
- SSDEEP 12288:C54G2nCWyPz5L8h0s0udOloBKwZC2tDclw:C54GXrzyh0sDOloYwZCUP
- TLSH T13FB4AE1773E450F5D466813889A69656F776B8320B208BCF23A4436E1F737D1AE3AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_2924775379ca309bc979cb87e83ac2b9_amadey_cobalt-strike_fabookie_hijackloader_icedid_manusc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_2924775379ca309bc979cb87e83ac2b9_amadey_cobalt-strike_fabookie_hijackloader_icedid_manusc.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_2924775379ca309bc979cb87e83ac2b9_amadey_cobalt-strike_fabookie_hijackloader_icedid_manuscrypt_njrat_rhadamanthys_satacom_stop_vidar
- Size 497KB
- SHA256 672b2cda2c4325c22ccb487a4bfe2e729dda8e86b2ec2b9c2321d183656649ce
- MD5 2924775379ca309bc979cb87e83ac2b9
- SHA1 3b0eab80ee7e597aa3b40510574772a6b434f426
- SHA512 f83f088ef98ba648cba986bc98251e3fc078e60a1ffad495c36607440298d7880b0b444582edbfa03cb63fa5f99511fa1d25f4cf69e6bf721495003f517afd36
- SSDEEP 12288:C54G2nCWyPz5L8h0s0udOloBKwZC2tDclw:C54GXrzyh0sDOloYwZCUP
- TLSH T13FB4AE1773E450F5D466813889A69656F776B8320B208BCF23A4436E1F737D1AE3AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.