General
- Target 2026-07-12_b9d945521e7f9106f875eebb890435bb_amadey_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 4.4MB
- Sample260712-nyplrshs2n
- SHA256 b0ed1219e75125043a66075c3ab289c2fce9ee3d77f20564710800edd089b5cc
- MD5 b9d945521e7f9106f875eebb890435bb
- SHA1 abb74a05cd199d51e8fbbe3659fd0f4775fc038a
- SHA512 4a8abbae08e218fffe581b226d109f328fdc061375d69ddcef4c44ac27ef140ac84b846c63c5757f27933bf1ac23d77d7e877bbf83a5adebd5875b3593c94fa1
- SSDEEP 49152:tYRw5x6M1HVO88hXl+tGbqVXLdwAwIPCwQ/gyp0vEJOQhVO88hXl+:Su5x6M1c/h1+tZzPBn/h1+
- TLSH T13E267C17F1A482F5D076C079C686A636EA727C461B3096CF0741F7692F37AE09A3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_b9d945521e7f9106f875eebb890435bb_amadey_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_b9d945521e7f9106f875eebb890435bb_amadey_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_b9d945521e7f9106f875eebb890435bb_amadey_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 4.4MB
- SHA256 b0ed1219e75125043a66075c3ab289c2fce9ee3d77f20564710800edd089b5cc
- MD5 b9d945521e7f9106f875eebb890435bb
- SHA1 abb74a05cd199d51e8fbbe3659fd0f4775fc038a
- SHA512 4a8abbae08e218fffe581b226d109f328fdc061375d69ddcef4c44ac27ef140ac84b846c63c5757f27933bf1ac23d77d7e877bbf83a5adebd5875b3593c94fa1
- SSDEEP 49152:tYRw5x6M1HVO88hXl+tGbqVXLdwAwIPCwQ/gyp0vEJOQhVO88hXl+:Su5x6M1c/h1+tZzPBn/h1+
- TLSH T13E267C17F1A482F5D076C079C686A636EA727C461B3096CF0741F7692F37AE09A3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry