General
- Target 2026-07-14_c312c20112e80c2cdb02797ccadf48ec_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 12.5MB
- Sample260714-tv2ptaa17s
- SHA256 8763169d786b605646d37aa73bd476e9da94eac1125a5d4b403086b2db4e55d8
- MD5 c312c20112e80c2cdb02797ccadf48ec
- SHA1 cda6a398fc393866141372cfee4d17f3aa421dad
- SHA512 abcd397a8e0829276920588917ff77a19ea502278474d24751a4ee86b20c0b71d7ebc733c5cf54f3b47294599bece2f094e9e68f010220f810fc33ac94005172
- SSDEEP 98304:Su5x6M1WoDDIu5x6M1WoDDuu5x6M1WoDDIu5x6M1WoDDeq9ceq9+2xl/SSay:Ji87i8li87i8eWqQI0py
- TLSH T15DD68D42F2E400A9E1AE8534C6759732EA77BC525B6097CF56C0F62A2F72BC05E35723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_c312c20112e80c2cdb02797ccadf48ec_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_c312c20112e80c2cdb02797ccadf48ec_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_c312c20112e80c2cdb02797ccadf48ec_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 12.5MB
- SHA256 8763169d786b605646d37aa73bd476e9da94eac1125a5d4b403086b2db4e55d8
- MD5 c312c20112e80c2cdb02797ccadf48ec
- SHA1 cda6a398fc393866141372cfee4d17f3aa421dad
- SHA512 abcd397a8e0829276920588917ff77a19ea502278474d24751a4ee86b20c0b71d7ebc733c5cf54f3b47294599bece2f094e9e68f010220f810fc33ac94005172
- SSDEEP 98304:Su5x6M1WoDDIu5x6M1WoDDuu5x6M1WoDDIu5x6M1WoDDeq9ceq9+2xl/SSay:Ji87i8li87i8eWqQI0py
- TLSH T15DD68D42F2E400A9E1AE8534C6759732EA77BC525B6097CF56C0F62A2F72BC05E35723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry