General
- Target 2026-07-15_511b2c689212b5d9a4fbfad86d8da2c1_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 6.9MB
- Sample260716-ccgs9aes3s
- SHA256 e5f5adc656b02c11fd6835ca2582fc01f37cd94ffbe6297aac1e9f64964f0b08
- MD5 511b2c689212b5d9a4fbfad86d8da2c1
- SHA1 9d2ffc1d34fa2f6e9e4d59f6390199fd13c313ea
- SHA512 c21b3079650406761add25f3078d1329891a73a24c970f2b84a484b6f789149d8970e6520873e87bf52110378fc3cef471000ce3f5977c8101ea4a60e9ee8492
- SSDEEP 98304:Su5x6M1c/h1+rjzEvlPgpH3/4ed+UsiC96F/h1+:Jw/h1+PzEvlIBrdLa8F/h1+
- TLSH T1FD767D13F6E941A9E0AAD174C6A69732EE727C424B3096CF0344B7192F77AD09B39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_511b2c689212b5d9a4fbfad86d8da2c1_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_511b2c689212b5d9a4fbfad86d8da2c1_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_511b2c689212b5d9a4fbfad86d8da2c1_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 6.9MB
- SHA256 e5f5adc656b02c11fd6835ca2582fc01f37cd94ffbe6297aac1e9f64964f0b08
- MD5 511b2c689212b5d9a4fbfad86d8da2c1
- SHA1 9d2ffc1d34fa2f6e9e4d59f6390199fd13c313ea
- SHA512 c21b3079650406761add25f3078d1329891a73a24c970f2b84a484b6f789149d8970e6520873e87bf52110378fc3cef471000ce3f5977c8101ea4a60e9ee8492
- SSDEEP 98304:Su5x6M1c/h1+rjzEvlPgpH3/4ed+UsiC96F/h1+:Jw/h1+PzEvlIBrdLa8F/h1+
- TLSH T1FD767D13F6E941A9E0AAD174C6A69732EE727C424B3096CF0344B7192F77AD09B39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry