General
- Target 2026-07-13_a0aada77ec8e0d41d20dfa15a08d9c6a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 3.6MB
- Sample260713-1jsq4abs2z
- SHA256 109e8267f774b80d770ccce4c2a2121a67e6c1b58be5238d492cf603dcfa5094
- MD5 a0aada77ec8e0d41d20dfa15a08d9c6a
- SHA1 1c4958c97ec4f91f4f44435f689e106110ee36ef
- SHA512 b6b8faeb03a1c7efbfba212a02c0fea386a5234192bcff3d1c1be9e303e9f4522d6e37accf0384f4c12c83ce62d9c2e8f25198a7bb08abb3eb44affaf8dddc11
- SSDEEP 49152:tYRw5x6M1HVOZFObqCOc/ltjO0Rpc3+pwpp22hIrWNgIOuWcP:Su5x6M1cG+YPppCpU2h
- TLSH T1C8069D43F2D540E9D05AC034838AA232EA72FC455B21A7DF1790BB562F77AD05B3EB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_a0aada77ec8e0d41d20dfa15a08d9c6a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_a0aada77ec8e0d41d20dfa15a08d9c6a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_a0aada77ec8e0d41d20dfa15a08d9c6a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 3.6MB
- SHA256 109e8267f774b80d770ccce4c2a2121a67e6c1b58be5238d492cf603dcfa5094
- MD5 a0aada77ec8e0d41d20dfa15a08d9c6a
- SHA1 1c4958c97ec4f91f4f44435f689e106110ee36ef
- SHA512 b6b8faeb03a1c7efbfba212a02c0fea386a5234192bcff3d1c1be9e303e9f4522d6e37accf0384f4c12c83ce62d9c2e8f25198a7bb08abb3eb44affaf8dddc11
- SSDEEP 49152:tYRw5x6M1HVOZFObqCOc/ltjO0Rpc3+pwpp22hIrWNgIOuWcP:Su5x6M1cG+YPppCpU2h
- TLSH T1C8069D43F2D540E9D05AC034838AA232EA72FC455B21A7DF1790BB562F77AD05B3EB25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry