General
- Target 2026-07-09_384816977d5d140bafca3105b49fccc9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 4.0MB
- Sample260709-1c7xfaaz8v
- SHA256 54d56b1a3d57c78b73beff2a1fdf1563e4ce988a958254a90a2c897a5929bee0
- MD5 384816977d5d140bafca3105b49fccc9
- SHA1 51158bae9920febe7cb5e23c690813ad505a2434
- SHA512 af3f73db015aedf8c06f1117290c0e4e1cfd677b90206bba7f2ba11bd538b19ac1d9aafe6c3793d40f0c8ed7e27314bc9beaccb1dee1492f77fb82fdf8d56458
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQUhOxW1PszNsQEpYq456rBZM9zfu:7IDQ/nW1PszI+W1Pszo6grizfu
- TLSH T1A3166A02E7A74A75EDBB6130CA665265AA777C100F7086CF0384A93E2F33BC19975727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_384816977d5d140bafca3105b49fccc9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_384816977d5d140bafca3105b49fccc9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_384816977d5d140bafca3105b49fccc9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 4.0MB
- SHA256 54d56b1a3d57c78b73beff2a1fdf1563e4ce988a958254a90a2c897a5929bee0
- MD5 384816977d5d140bafca3105b49fccc9
- SHA1 51158bae9920febe7cb5e23c690813ad505a2434
- SHA512 af3f73db015aedf8c06f1117290c0e4e1cfd677b90206bba7f2ba11bd538b19ac1d9aafe6c3793d40f0c8ed7e27314bc9beaccb1dee1492f77fb82fdf8d56458
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQUhOxW1PszNsQEpYq456rBZM9zfu:7IDQ/nW1PszI+W1Pszo6grizfu
- TLSH T1A3166A02E7A74A75EDBB6130CA665265AA777C100F7086CF0384A93E2F33BC19975727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory