General
- Target 2026-07-08_a4fa7eb780bbd70bd36b2406fd13a2f6_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 19.5MB
- Sample260708-vr22vads5k
- SHA256 f91f45ae345ef07d9a59729d5ae905b16abdf4df29aac713dd8b0b37ac2ae429
- MD5 a4fa7eb780bbd70bd36b2406fd13a2f6
- SHA1 5eb90c510112c581c3b76bc1686a24f3217a4739
- SHA512 023e5111d93ec319d7c2d7f3d3d80e29c7e95d86d9bca9f72a4b2a6ba0c7fc142493b76b79bf4c71186b9fdc5155a975441aae0d748e49476dcabbd9f64559c3
- SSDEEP 196608:JSWyZ/K0ttYVAATUL/h1+CKmd0hSWyZ/K0ttYVAATUL/h1+CKmd0Yt:zyZ/K0ttYZTfqiyZ/K0ttYZTfqt
- TLSH T1D4277D13F1A841A6E0A6D074CEA69735EB327C494BF195DF2240B7D82E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_a4fa7eb780bbd70bd36b2406fd13a2f6_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_a4fa7eb780bbd70bd36b2406fd13a2f6_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_a4fa7eb780bbd70bd36b2406fd13a2f6_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 19.5MB
- SHA256 f91f45ae345ef07d9a59729d5ae905b16abdf4df29aac713dd8b0b37ac2ae429
- MD5 a4fa7eb780bbd70bd36b2406fd13a2f6
- SHA1 5eb90c510112c581c3b76bc1686a24f3217a4739
- SHA512 023e5111d93ec319d7c2d7f3d3d80e29c7e95d86d9bca9f72a4b2a6ba0c7fc142493b76b79bf4c71186b9fdc5155a975441aae0d748e49476dcabbd9f64559c3
- SSDEEP 196608:JSWyZ/K0ttYVAATUL/h1+CKmd0hSWyZ/K0ttYVAATUL/h1+CKmd0Yt:zyZ/K0ttYZTfqiyZ/K0ttYZTfqt
- TLSH T1D4277D13F1A841A6E0A6D074CEA69735EB327C494BF195DF2240B7D82E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry