General
- Target 2026-07-16_0b06ac6427dd3ad9e1e3721d29b7da82_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.3MB
- Sample260716-w2jtpaez6y
- SHA256 bc236483f5ad02894ab7de1f90b22bf32082cdb372fdf52441ae470cbcd458a3
- MD5 0b06ac6427dd3ad9e1e3721d29b7da82
- SHA1 a542f0712332e4eb515d9d68fa0e4b490cb7eeee
- SHA512 6bfbbbcb4d8709159a0b9d76416b307cc16b6f80572fca867fb3a60fd5da1af35645866fb24bdf3975e741b9f95114eb8f2f160dd37bb52ead9a35705825213e
- SSDEEP 98304:Su5x6M1Y0oAaldmdmnpgu5x6M1Y0oAaldmdmnpa4LapI9:JhKmd0hhKmd0Y4cI9
- TLSH T1F0965A13B19144E9D299C034CF46D235D7A27C5D4BF1A6FB3280BAD92E73AD03B3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_0b06ac6427dd3ad9e1e3721d29b7da82_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_0b06ac6427dd3ad9e1e3721d29b7da82_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_0b06ac6427dd3ad9e1e3721d29b7da82_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.3MB
- SHA256 bc236483f5ad02894ab7de1f90b22bf32082cdb372fdf52441ae470cbcd458a3
- MD5 0b06ac6427dd3ad9e1e3721d29b7da82
- SHA1 a542f0712332e4eb515d9d68fa0e4b490cb7eeee
- SHA512 6bfbbbcb4d8709159a0b9d76416b307cc16b6f80572fca867fb3a60fd5da1af35645866fb24bdf3975e741b9f95114eb8f2f160dd37bb52ead9a35705825213e
- SSDEEP 98304:Su5x6M1Y0oAaldmdmnpgu5x6M1Y0oAaldmdmnpa4LapI9:JhKmd0hhKmd0Y4cI9
- TLSH T1F0965A13B19144E9D299C034CF46D235D7A27C5D4BF1A6FB3280BAD92E73AD03B3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry