General
- Target 2026-07-14_1214d26cb8af179beafafffc6455eb68_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 25.9MB
- Sample260714-2m3adae14m
- SHA256 20cee64b669e862eba6ae75221788cc9b1e11f290480c12475e23af2f3bbaec4
- MD5 1214d26cb8af179beafafffc6455eb68
- SHA1 4a0c4b126eac45074935adc7bf836bee95f94ed5
- SHA512 460b4b0f0e1b3639984c86ae9a5c5b79681abf1669911d2236692c735bdbcf7d77b9f1139397f4c702093e35f865c8e7f97245ad4220cd14dc04cf2772e6efc5
- SSDEEP 196608:Ji87i8li87i8eWqQI0pyui87i8li87i8eWqQI0pyO/h1+:FTBTeWqQjpVTBTeWqQjp
- TLSH T14F577C42F2E440A9E0AE8574C7659732EA77BC425B6096CF56C0F63E2F72BC05A35723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_1214d26cb8af179beafafffc6455eb68_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_1214d26cb8af179beafafffc6455eb68_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_1214d26cb8af179beafafffc6455eb68_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 25.9MB
- SHA256 20cee64b669e862eba6ae75221788cc9b1e11f290480c12475e23af2f3bbaec4
- MD5 1214d26cb8af179beafafffc6455eb68
- SHA1 4a0c4b126eac45074935adc7bf836bee95f94ed5
- SHA512 460b4b0f0e1b3639984c86ae9a5c5b79681abf1669911d2236692c735bdbcf7d77b9f1139397f4c702093e35f865c8e7f97245ad4220cd14dc04cf2772e6efc5
- SSDEEP 196608:Ji87i8li87i8eWqQI0pyui87i8li87i8eWqQI0pyO/h1+:FTBTeWqQjpVTBTeWqQjp
- TLSH T14F577C42F2E440A9E0AE8574C7659732EA77BC425B6096CF56C0F63E2F72BC05A35723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry