General
- Target 2026-07-08_462f3b9eb24b7f8ea34cdc2cb3e71c9b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.9MB
- Sample260708-kgll1aev4k
- SHA256 20999326429bd300ba51d433f88d6989cc34280622ea3ebefe0fb68e592b2fa3
- MD5 462f3b9eb24b7f8ea34cdc2cb3e71c9b
- SHA1 9b991b9cd9867aa4652000de232ca0e837751599
- SHA512 6101b7bb60135b3233a0e3d4d249a2529dfa6c706f5c01feec716d8fffa374be34c779c7235eec46fd04d53befd9eb2700e5cdf59f4e779b68c38be7c86b56a2
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp+joY:JSWyZ/K0ttYVAAT1Kmd0eoY
- TLSH T17F967C03F2A441E9E06AD174CE669631EB327C494BF1A5EF3250B6D52E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_462f3b9eb24b7f8ea34cdc2cb3e71c9b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_462f3b9eb24b7f8ea34cdc2cb3e71c9b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_462f3b9eb24b7f8ea34cdc2cb3e71c9b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.9MB
- SHA256 20999326429bd300ba51d433f88d6989cc34280622ea3ebefe0fb68e592b2fa3
- MD5 462f3b9eb24b7f8ea34cdc2cb3e71c9b
- SHA1 9b991b9cd9867aa4652000de232ca0e837751599
- SHA512 6101b7bb60135b3233a0e3d4d249a2529dfa6c706f5c01feec716d8fffa374be34c779c7235eec46fd04d53befd9eb2700e5cdf59f4e779b68c38be7c86b56a2
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp+joY:JSWyZ/K0ttYVAAT1Kmd0eoY
- TLSH T17F967C03F2A441E9E06AD174CE669631EB327C494BF1A5EF3250B6D52E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry