General
- Target 2026-07-09_2ce92c2d41b3f236cfb286082ee18c2c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.6MB
- Sample260709-web6bsfx4x
- SHA256 c9fc2fae8588b542842fedbc9301dc94a0915efe8b2c3a228432157bf8406637
- MD5 2ce92c2d41b3f236cfb286082ee18c2c
- SHA1 63b6c3a5aac8d8e09cb7afa9177afe3ced166fd6
- SHA512 4181d6fc94b579d9c3789a1ce534fc29bfdfe564562768af548e316fe6e8e75356500b8cc980d68a690dde38ef5c43c41ccf6ea4ff44e1804f5b74fff971b433
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+UvyEYc/b3w8O:zyZ/K0ttYZTEqmvyEYKbi
- TLSH T170D65B13B6E440E5E06AD174CE668631EB727C464BF1A6DF2240B6D92F33AD07E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_2ce92c2d41b3f236cfb286082ee18c2c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_2ce92c2d41b3f236cfb286082ee18c2c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_2ce92c2d41b3f236cfb286082ee18c2c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.6MB
- SHA256 c9fc2fae8588b542842fedbc9301dc94a0915efe8b2c3a228432157bf8406637
- MD5 2ce92c2d41b3f236cfb286082ee18c2c
- SHA1 63b6c3a5aac8d8e09cb7afa9177afe3ced166fd6
- SHA512 4181d6fc94b579d9c3789a1ce534fc29bfdfe564562768af548e316fe6e8e75356500b8cc980d68a690dde38ef5c43c41ccf6ea4ff44e1804f5b74fff971b433
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+UvyEYc/b3w8O:zyZ/K0ttYZTEqmvyEYKbi
- TLSH T170D65B13B6E440E5E06AD174CE668631EB727C464BF1A6DF2240B6D92F33AD07E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry