General
- Target 2026-07-08_277d3c55e7a4bbec2772fcef0e33c096_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar
- Size 22.0MB
- Sample260708-w2gpbsfy8s
- SHA256 819b28782e99617aa8e26f171d6f184740f7a223cc4af3b530feb8108861a4da
- MD5 277d3c55e7a4bbec2772fcef0e33c096
- SHA1 1a3a6300e13f03be7df0c4bb471ae96b0eb8ca92
- SHA512 c99365e8f5b1811820ade7ea6131bd432ea1e2108ee95300236038cc3e5455c62fd7725568485f497589a3a0227e74b60da1c793868ff9e275134e1085ba25b6
- SSDEEP 196608:Qi8kLri8kL2vyEYc/b3w8yVi8kLri8kL2vyEYc/b3w8yJ:IkLDkL2vyEYKb8kLDkL2vyEYKb2
- TLSH T1F9376C52BBE441B6E0BA9534C9769676FA727C420B31DA8F0281F61E2F337D09D35326
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_277d3c55e7a4bbec2772fcef0e33c096_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_277d3c55e7a4bbec2772fcef0e33c096_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_277d3c55e7a4bbec2772fcef0e33c096_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar
- Size 22.0MB
- SHA256 819b28782e99617aa8e26f171d6f184740f7a223cc4af3b530feb8108861a4da
- MD5 277d3c55e7a4bbec2772fcef0e33c096
- SHA1 1a3a6300e13f03be7df0c4bb471ae96b0eb8ca92
- SHA512 c99365e8f5b1811820ade7ea6131bd432ea1e2108ee95300236038cc3e5455c62fd7725568485f497589a3a0227e74b60da1c793868ff9e275134e1085ba25b6
- SSDEEP 196608:Qi8kLri8kL2vyEYc/b3w8yVi8kLri8kL2vyEYc/b3w8yJ:IkLDkL2vyEYKb8kLDkL2vyEYKb2
- TLSH T1F9376C52BBE441B6E0BA9534C9769676FA727C420B31DA8F0281F61E2F337D09D35326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry