General
- Target 2026-07-08_4ef1cea4bd0aaac7b8e154be1467ca92_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 24.6MB
- Sample260708-wktmkae18x
- SHA256 69689de058ae265ca049d83df70e573346def5fd4510891ff4e5359cb9e1522a
- MD5 4ef1cea4bd0aaac7b8e154be1467ca92
- SHA1 facc4bc1e2aa447e79482d20e76a0e796e6850e0
- SHA512 ce4cf51b546817810d5c54e19654533fc5f9d0ae0080951fd8aeea5c55651de164c6d721c1941712198ed932b505d33ea59479fe9de9fbea3fcf9b5abbd9603a
- SSDEEP 196608:Qi8kLri8kL2vyEYc/b3w8yVi8kLri8kL2vyEYc/b3w8yv2Vh:IkLDkL2vyEYKb8kLDkL2vyEYKbse
- TLSH T139476C52B7E441B6E0AAD13485769676FA727C420B31DACF0281F65E2F337D09E39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_4ef1cea4bd0aaac7b8e154be1467ca92_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_4ef1cea4bd0aaac7b8e154be1467ca92_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_4ef1cea4bd0aaac7b8e154be1467ca92_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 24.6MB
- SHA256 69689de058ae265ca049d83df70e573346def5fd4510891ff4e5359cb9e1522a
- MD5 4ef1cea4bd0aaac7b8e154be1467ca92
- SHA1 facc4bc1e2aa447e79482d20e76a0e796e6850e0
- SHA512 ce4cf51b546817810d5c54e19654533fc5f9d0ae0080951fd8aeea5c55651de164c6d721c1941712198ed932b505d33ea59479fe9de9fbea3fcf9b5abbd9603a
- SSDEEP 196608:Qi8kLri8kL2vyEYc/b3w8yVi8kLri8kL2vyEYc/b3w8yv2Vh:IkLDkL2vyEYKb8kLDkL2vyEYKbse
- TLSH T139476C52B7E441B6E0AAD13485769676FA727C420B31DACF0281F65E2F337D09E39326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application