General
- Target 2026-07-09_54658a81d64609b75062806b64af487d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.0MB
- Sample260709-cn3vvsby3k
- SHA256 f1fd353dbd30d7dcbf3b54d622cf142e9475e6811a1c95a654afa75b83a2f2fe
- MD5 54658a81d64609b75062806b64af487d
- SHA1 34159f14096ef7ef7ecd0beed22285b334e12a52
- SHA512 fb2acd59a5257ee491922de127740fde51e7ea1c01dee33bfc16645ae4042ad948060dabbf918db526e2ff482f3c094ae4f985383fe68e5c5676a6fb47887df8
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCT2u5x6M1uWQtZ/K0tGOFWVRuLftCTxu5x6M1:JSWyZ/K0ttYVAATtSWyZ/K0ttYVAATW
- TLSH T1E1C67C03F2E540E9E1AAE174CE7593319B32BC5A4BF1A5DF2240B6D41E36AD07B38725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_54658a81d64609b75062806b64af487d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_54658a81d64609b75062806b64af487d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_54658a81d64609b75062806b64af487d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 11.0MB
- SHA256 f1fd353dbd30d7dcbf3b54d622cf142e9475e6811a1c95a654afa75b83a2f2fe
- MD5 54658a81d64609b75062806b64af487d
- SHA1 34159f14096ef7ef7ecd0beed22285b334e12a52
- SHA512 fb2acd59a5257ee491922de127740fde51e7ea1c01dee33bfc16645ae4042ad948060dabbf918db526e2ff482f3c094ae4f985383fe68e5c5676a6fb47887df8
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCT2u5x6M1uWQtZ/K0tGOFWVRuLftCTxu5x6M1:JSWyZ/K0ttYVAATtSWyZ/K0ttYVAATW
- TLSH T1E1C67C03F2E540E9E1AAE174CE7593319B32BC5A4BF1A5DF2240B6D41E36AD07B38725
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry