General
- Target 2026-07-09_5ee8912e57e8921bc60d7d64d98d2783_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 17.1MB
- Sample260709-vydylaev9m
- SHA256 484102986f757bdbefad513b1a0758de93d9892ce14b01d460c2edbb517ade3e
- MD5 5ee8912e57e8921bc60d7d64d98d2783
- SHA1 afea014ac2b0120185e70a6fdc537eadf071e5bc
- SHA512 9b179ed241a561f9f8b8dddbfe88e018447a6884ee15638a3b8c7d577a6d6cc2381dc166ebaf10a436bbc0a66e57ff5b245711955a834c3a65c7205484de9344
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+fSWyZ/K0ttYVAAT1Kmd0x/h1+I:zyZ/K0ttYZTEqzyZ/K0ttYZTEqK
- TLSH T1B7076C03F1A540E9E06AD174CE669631EB327C494BF1A5EF3280B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_5ee8912e57e8921bc60d7d64d98d2783_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_5ee8912e57e8921bc60d7d64d98d2783_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_5ee8912e57e8921bc60d7d64d98d2783_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 17.1MB
- SHA256 484102986f757bdbefad513b1a0758de93d9892ce14b01d460c2edbb517ade3e
- MD5 5ee8912e57e8921bc60d7d64d98d2783
- SHA1 afea014ac2b0120185e70a6fdc537eadf071e5bc
- SHA512 9b179ed241a561f9f8b8dddbfe88e018447a6884ee15638a3b8c7d577a6d6cc2381dc166ebaf10a436bbc0a66e57ff5b245711955a834c3a65c7205484de9344
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+fSWyZ/K0ttYVAAT1Kmd0x/h1+I:zyZ/K0ttYZTEqzyZ/K0ttYZTEqK
- TLSH T1B7076C03F1A540E9E06AD174CE669631EB327C494BF1A5EF3280B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry