General
- Target 2026-07-09_07b9ffb47e28c273fe924dc78d21454d_amadey_cobalt-strike_elex_hijackloader_icedid_rhadamanthys_smoke-loader_stop_vidar_wannacry
- Size 1.8MB
- Sample260709-sgn15adv7s
- SHA256 7f31a110d5e1171663376389a91c526821bf96f8c6cfee329cdd0c9b0605a74f
- MD5 07b9ffb47e28c273fe924dc78d21454d
- SHA1 fc4d0c196032d791fd4d5161f31872091a463025
- SHA512 14bc095affaaad6bbb15dfcc3285c1a76cb55e3540f9a3ba62b20c1bbf703f64c7f4a930e5c6ae0210d83380dca85d1d73bc42702d61b8f54703042dd77e4360
- SSDEEP 24576:3jQMFHDUT22CaqaExD0wlOjwG5Ze0p4Ek4niOkl/A04szE87JKTvm:UMVsMIAOjReW4SkZP4sz9Mb
- TLSH T1C6953B65F1B88362D1B3A079C9D7A659F632BC45073089CF2249BB193E377D1E93A324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_07b9ffb47e28c273fe924dc78d21454d_amadey_cobalt-strike_elex_hijackloader_icedid_rhadamanth.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_07b9ffb47e28c273fe924dc78d21454d_amadey_cobalt-strike_elex_hijackloader_icedid_rhadamanth.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_07b9ffb47e28c273fe924dc78d21454d_amadey_cobalt-strike_elex_hijackloader_icedid_rhadamanthys_smoke-loader_stop_vidar_wannacry
- Size 1.8MB
- SHA256 7f31a110d5e1171663376389a91c526821bf96f8c6cfee329cdd0c9b0605a74f
- MD5 07b9ffb47e28c273fe924dc78d21454d
- SHA1 fc4d0c196032d791fd4d5161f31872091a463025
- SHA512 14bc095affaaad6bbb15dfcc3285c1a76cb55e3540f9a3ba62b20c1bbf703f64c7f4a930e5c6ae0210d83380dca85d1d73bc42702d61b8f54703042dd77e4360
- SSDEEP 24576:3jQMFHDUT22CaqaExD0wlOjwG5Ze0p4Ek4niOkl/A04szE87JKTvm:UMVsMIAOjReW4SkZP4sz9Mb
- TLSH T1C6953B65F1B88362D1B3A079C9D7A659F632BC45073089CF2249BB193E377D1E93A324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.