General
- Target 2026-07-08_74bc028d70d209fb35eec7595a81861d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 37.2MB
- Sample260708-sc7yfagy8t
- SHA256 350ca314763956364efb6dd139e01d03c4cefa16ba8975d119358bf7224e684e
- MD5 74bc028d70d209fb35eec7595a81861d
- SHA1 cacde143a2e15ac157beff8904da993f026f5735
- SHA512 1595d984f02cff1698bfeb53be7fa1cfbd5f55a95770c4a6fedd6ea8f4b9f562308bbf880543a85d55a3575125af9eb63acde49dc10ed219f8463a4cf20f4a47
- SSDEEP 786432:zyZ/K0ttYZTfqiyZ/K0ttYZTfqByZ/K0ttYZTfqiyZ/K0ttYZTfqU:uZ/K0ttYRfqpZ/K0ttYRfqoZ/K0ttYRX
- TLSH T15F877D13F1A441A9E0AAD174CE669631EB327C494BF195EF3240B7D82E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_74bc028d70d209fb35eec7595a81861d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_74bc028d70d209fb35eec7595a81861d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_74bc028d70d209fb35eec7595a81861d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 37.2MB
- SHA256 350ca314763956364efb6dd139e01d03c4cefa16ba8975d119358bf7224e684e
- MD5 74bc028d70d209fb35eec7595a81861d
- SHA1 cacde143a2e15ac157beff8904da993f026f5735
- SHA512 1595d984f02cff1698bfeb53be7fa1cfbd5f55a95770c4a6fedd6ea8f4b9f562308bbf880543a85d55a3575125af9eb63acde49dc10ed219f8463a4cf20f4a47
- SSDEEP 786432:zyZ/K0ttYZTfqiyZ/K0ttYZTfqByZ/K0ttYZTfqiyZ/K0ttYZTfqU:uZ/K0ttYRfqpZ/K0ttYRfqoZ/K0ttYRX
- TLSH T15F877D13F1A441A9E0AAD174CE669631EB327C494BF195EF3240B7D82E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application