General
- Target 2026-07-13_33fe307d8937f80d0e89d1bf5c607f38_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 5.5MB
- Sample260713-2ty7asct5y
- SHA256 136b2d208a8c7fbc63f7ba5b5c2eebfee6f1559bc5dd93153cf791911743448d
- MD5 33fe307d8937f80d0e89d1bf5c607f38
- SHA1 9245064c46e287e83e7ddc301fc4a7f6134cabfa
- SHA512 53b8e2a6b3470287ec8538cc7ffeb1e55b746bb4572c0264ba3d3f62931872cde0f40ae1ee700bca3c492e44775e0c1e98ac127be94bc7a14c93dbd8d3196bb8
- SSDEEP 98304:Su5x6M1c/h1+uTvUko/Sz6j0I8Nij/h1+:Jw/h1+uTo/Eq08j/h1+
- TLSH T128466CBDB6E940D6C071D0F4C84253A5E2B3B85143318ACB16999B1E6E3FFD98E39724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_33fe307d8937f80d0e89d1bf5c607f38_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_33fe307d8937f80d0e89d1bf5c607f38_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_33fe307d8937f80d0e89d1bf5c607f38_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 5.5MB
- SHA256 136b2d208a8c7fbc63f7ba5b5c2eebfee6f1559bc5dd93153cf791911743448d
- MD5 33fe307d8937f80d0e89d1bf5c607f38
- SHA1 9245064c46e287e83e7ddc301fc4a7f6134cabfa
- SHA512 53b8e2a6b3470287ec8538cc7ffeb1e55b746bb4572c0264ba3d3f62931872cde0f40ae1ee700bca3c492e44775e0c1e98ac127be94bc7a14c93dbd8d3196bb8
- SSDEEP 98304:Su5x6M1c/h1+uTvUko/Sz6j0I8Nij/h1+:Jw/h1+uTo/Eq08j/h1+
- TLSH T128466CBDB6E940D6C071D0F4C84253A5E2B3B85143318ACB16999B1E6E3FFD98E39724
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry