General
- Target 2026-07-17_9dbaf3073e0f73ed3378940f9ebf9d9f_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry
- Size 666KB
- Sample260717-jf5staet9j
- SHA256 0825565eb82050b498fa0e5a75ce2d05d4abaf252935381327ddaac47ca92b6b
- MD5 9dbaf3073e0f73ed3378940f9ebf9d9f
- SHA1 d8cee04772c1b8fe3983c300956b38adf1679a3f
- SHA512 1c9e1005c30eb9e4d35cc927742c4cab996c704add8ec2f383e01ce59e6ff002eaa2904af23578dc6d47a0b41a236e7e3ae9c698702742e5ccbed2c4425db060
- SSDEEP 12288:w4Ryed8I7r/7mCUG4Ryed8I7r/7mKv0KV8qN+85Y5s8l3t5v4JAdGym:w4R5CIH/7p4R5CIH/7Hv0+3Idd5QJ+Rm
- TLSH T16DE46D32F75098A9F422C5B9A8358116B9317D7107A09C5BB3C0BB193E336D3B9B671B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_9dbaf3073e0f73ed3378940f9ebf9d9f_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_9dbaf3073e0f73ed3378940f9ebf9d9f_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_9dbaf3073e0f73ed3378940f9ebf9d9f_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry
- Size 666KB
- SHA256 0825565eb82050b498fa0e5a75ce2d05d4abaf252935381327ddaac47ca92b6b
- MD5 9dbaf3073e0f73ed3378940f9ebf9d9f
- SHA1 d8cee04772c1b8fe3983c300956b38adf1679a3f
- SHA512 1c9e1005c30eb9e4d35cc927742c4cab996c704add8ec2f383e01ce59e6ff002eaa2904af23578dc6d47a0b41a236e7e3ae9c698702742e5ccbed2c4425db060
- SSDEEP 12288:w4Ryed8I7r/7mCUG4Ryed8I7r/7mKv0KV8qN+85Y5s8l3t5v4JAdGym:w4R5CIH/7p4R5CIH/7Hv0+3Idd5QJ+Rm
- TLSH T16DE46D32F75098A9F422C5B9A8358116B9317D7107A09C5BB3C0BB193E336D3B9B671B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory