General
- Target 2026-07-07_e6a51d00bfb80f55e68612ad5c401d15_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.6MB
- Sample260707-v2d3rsbt5p
- SHA256 7810b9c709dca02d40bf281e3ff28fc7205f0046f08286199358220dbc45c76c
- MD5 e6a51d00bfb80f55e68612ad5c401d15
- SHA1 a856a15f7b88010673881f0cc2865ab316efd95c
- SHA512 512b15157031cb6f6a213a2f841be3916872fa8cb8693b280ef1f87b9bdbc03b7b335ba8ac2ad865880caf258edbd7f15513644027eccf65d001ffe2626a0668
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp+joVFRQ:JSWyZ/K0ttYVAAT1Kmd0eoVFa
- TLSH T1BD967D03F2A540E9E1AAD174CE669231EB327C494BF1A5EF324076D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_e6a51d00bfb80f55e68612ad5c401d15_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_e6a51d00bfb80f55e68612ad5c401d15_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_e6a51d00bfb80f55e68612ad5c401d15_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.6MB
- SHA256 7810b9c709dca02d40bf281e3ff28fc7205f0046f08286199358220dbc45c76c
- MD5 e6a51d00bfb80f55e68612ad5c401d15
- SHA1 a856a15f7b88010673881f0cc2865ab316efd95c
- SHA512 512b15157031cb6f6a213a2f841be3916872fa8cb8693b280ef1f87b9bdbc03b7b335ba8ac2ad865880caf258edbd7f15513644027eccf65d001ffe2626a0668
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp+joVFRQ:JSWyZ/K0ttYVAAT1Kmd0eoVFa
- TLSH T1BD967D03F2A540E9E1AAD174CE669231EB327C494BF1A5EF324076D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry