General
- Target 2026-07-15_90ebb945bf3d412b622a7a58b9835a64_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 5.2MB
- Sample260715-lqd4yscv2w
- SHA256 63ac829b2a76dc8e8ce396cbd59ed082de2c62e4a44f0241d2d8247dc3d84694
- MD5 90ebb945bf3d412b622a7a58b9835a64
- SHA1 dfc530a90e4705b41057309a6978e12e79020704
- SHA512 82e85f7f2e31842ff702cbcae2ec675520af33eb793e4180b2b1f55613b144ae78cfcbeb4bdbd7153ecf1cd7b64d5ce096289604e059b1c0a67951403d89f4b4
- SSDEEP 98304:Su5x6M1c/h1+o6u5x6M1c/h1+o0GgHIKgMW/h1+:Jw/h1+oxw/h1+o6oKA/h1+
- TLSH T1D4469E66F6A481B5D076C074C5C6A636EA727C421B309BCB4346F7682F377D09A3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_90ebb945bf3d412b622a7a58b9835a64_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_90ebb945bf3d412b622a7a58b9835a64_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_90ebb945bf3d412b622a7a58b9835a64_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 5.2MB
- SHA256 63ac829b2a76dc8e8ce396cbd59ed082de2c62e4a44f0241d2d8247dc3d84694
- MD5 90ebb945bf3d412b622a7a58b9835a64
- SHA1 dfc530a90e4705b41057309a6978e12e79020704
- SHA512 82e85f7f2e31842ff702cbcae2ec675520af33eb793e4180b2b1f55613b144ae78cfcbeb4bdbd7153ecf1cd7b64d5ce096289604e059b1c0a67951403d89f4b4
- SSDEEP 98304:Su5x6M1c/h1+o6u5x6M1c/h1+o0GgHIKgMW/h1+:Jw/h1+oxw/h1+o6oKA/h1+
- TLSH T1D4469E66F6A481B5D076C074C5C6A636EA727C421B309BCB4346F7682F377D09A3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry