General
- Target 2026-07-08_06d1b3476a26a76451ef16e287cf2f22_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar
- Size 22.0MB
- Sample260708-xerfpags5y
- SHA256 c28f7b6095f5298da07dbe5d8dd787b5e44968068f6a4e1826ad917ba686983e
- MD5 06d1b3476a26a76451ef16e287cf2f22
- SHA1 90f6874659db3c32752c6e3dd1fc1a687689e192
- SHA512 61171a86cd628bb2c99f9ba16244d49efbe3ecca3eba3ee5b745b4a31ebb94c400b2a7f29f0dfe524d3342f68434774be535960573f55fc8a48d8bcf3bc338f8
- SSDEEP 196608:Qi8kLri8kL2vyEYc/b3w8yVi8kLri8kL2vyEYc/b3w8ypD:IkLDkL2vyEYKb8kLDkL2vyEYKb8D
- TLSH T131376C52BBE441B6E0BA9534C9769676FA727C420B31DA8F0281F61E2F337D09D35326
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_06d1b3476a26a76451ef16e287cf2f22_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_06d1b3476a26a76451ef16e287cf2f22_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_06d1b3476a26a76451ef16e287cf2f22_amadey_cobalt-strike_elex_emotet_icedid_njrat_remcos_stealc_vidar
- Size 22.0MB
- SHA256 c28f7b6095f5298da07dbe5d8dd787b5e44968068f6a4e1826ad917ba686983e
- MD5 06d1b3476a26a76451ef16e287cf2f22
- SHA1 90f6874659db3c32752c6e3dd1fc1a687689e192
- SHA512 61171a86cd628bb2c99f9ba16244d49efbe3ecca3eba3ee5b745b4a31ebb94c400b2a7f29f0dfe524d3342f68434774be535960573f55fc8a48d8bcf3bc338f8
- SSDEEP 196608:Qi8kLri8kL2vyEYc/b3w8yVi8kLri8kL2vyEYc/b3w8ypD:IkLDkL2vyEYKb8kLDkL2vyEYKb8D
- TLSH T131376C52BBE441B6E0BA9534C9769676FA727C420B31DA8F0281F61E2F337D09D35326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry