General
- Target 2026-07-08_d2187393727c8c7daf774d3599596730_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 9.5MB
- Sample260708-ynmdrsgz3z
- SHA256 5e586cf8d3408bb2010e317991bc46a17156a2747a5f19e4e2033efcb9e9aa88
- MD5 d2187393727c8c7daf774d3599596730
- SHA1 96524da1adc1d34133f20011d9abc7db8cdd2cd0
- SHA512 6d4904b2c76da1582cc227f5ae310a66d31a33bec74ad1af7d053f547c17873d090b5a3d40b34d8d4343364c4f77da63495746981be647d4676fa8a18ab1f702
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp7joXnUm8UO:JSWyZ/K0ttYVAAT1Kmd09oX18UO
- TLSH T19EA67C03F2A541E9E06AD174CE668231EB327C594BF1A5EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_d2187393727c8c7daf774d3599596730_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_d2187393727c8c7daf774d3599596730_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_d2187393727c8c7daf774d3599596730_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 9.5MB
- SHA256 5e586cf8d3408bb2010e317991bc46a17156a2747a5f19e4e2033efcb9e9aa88
- MD5 d2187393727c8c7daf774d3599596730
- SHA1 96524da1adc1d34133f20011d9abc7db8cdd2cd0
- SHA512 6d4904b2c76da1582cc227f5ae310a66d31a33bec74ad1af7d053f547c17873d090b5a3d40b34d8d4343364c4f77da63495746981be647d4676fa8a18ab1f702
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp7joXnUm8UO:JSWyZ/K0ttYVAAT1Kmd09oX18UO
- TLSH T19EA67C03F2A541E9E06AD174CE668231EB327C594BF1A5EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry