General
- Target 2026-07-09_343a2c37b121d5a659ded2d2df9be416_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 17.0MB
- Sample260709-wb28caey9m
- SHA256 54cf5012dfa1825b2dc0b0ce3a99f974feb7c29fa61ac6eea0a12e38b92532a1
- MD5 343a2c37b121d5a659ded2d2df9be416
- SHA1 eb8a35de60fd21338c2a2bd16f32c69ecc9b5429
- SHA512 2f2341c7253263dd75e4b1e2e8542c9784f4146d63d6f41112d7e326fc161b7b72681e88a9d463c05a19d618d1b999a45fe558bb2113d08956ca21217be9c80e
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+fSWyZ/K0ttYVAAT1Kmd0x/h1+E:zyZ/K0ttYZTEqzyZ/K0ttYZTEqS
- TLSH T1E4077C03F2A540E9E1AAD174CE669231DB327C494BF1A5EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_343a2c37b121d5a659ded2d2df9be416_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_343a2c37b121d5a659ded2d2df9be416_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_343a2c37b121d5a659ded2d2df9be416_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 17.0MB
- SHA256 54cf5012dfa1825b2dc0b0ce3a99f974feb7c29fa61ac6eea0a12e38b92532a1
- MD5 343a2c37b121d5a659ded2d2df9be416
- SHA1 eb8a35de60fd21338c2a2bd16f32c69ecc9b5429
- SHA512 2f2341c7253263dd75e4b1e2e8542c9784f4146d63d6f41112d7e326fc161b7b72681e88a9d463c05a19d618d1b999a45fe558bb2113d08956ca21217be9c80e
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+fSWyZ/K0ttYVAAT1Kmd0x/h1+E:zyZ/K0ttYZTEqzyZ/K0ttYZTEqS
- TLSH T1E4077C03F2A540E9E1AAD174CE669231DB327C494BF1A5EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry