General
- Target 2026-07-18_c6f9af55706d326a03af4e2b22e4fa96_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.1MB
- Sample260718-3p9ynsft7n
- SHA256 aeb6f0a2f33cb44111942303ab525786da022b1cb11490ad8f3e363a0446c541
- MD5 c6f9af55706d326a03af4e2b22e4fa96
- SHA1 ac2391267156b233835246d32c1fa4002e9db259
- SHA512 8bd90596df2674e786c719237acad5f4875fd113aabd25a3c422a2a26435021e6e65449cb20af5417d9124f41700b79eeed64df54e6430910b0ff8373f21eaa8
- SSDEEP 49152:tYRw5x6M1HVO3YRw5x6M1HVOggjI45TMwwapIgTtgjI45TMwwapIgTI:Su5x6M1cIu5x6M1cSLapISLapI9
- TLSH T1A8363A2271E200AAC69D9031CF46973597E17C798FF1C3E7B245B6C92F725C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_c6f9af55706d326a03af4e2b22e4fa96_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_c6f9af55706d326a03af4e2b22e4fa96_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_c6f9af55706d326a03af4e2b22e4fa96_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.1MB
- SHA256 aeb6f0a2f33cb44111942303ab525786da022b1cb11490ad8f3e363a0446c541
- MD5 c6f9af55706d326a03af4e2b22e4fa96
- SHA1 ac2391267156b233835246d32c1fa4002e9db259
- SHA512 8bd90596df2674e786c719237acad5f4875fd113aabd25a3c422a2a26435021e6e65449cb20af5417d9124f41700b79eeed64df54e6430910b0ff8373f21eaa8
- SSDEEP 49152:tYRw5x6M1HVO3YRw5x6M1HVOggjI45TMwwapIgTtgjI45TMwwapIgTI:Su5x6M1cIu5x6M1cSLapISLapI9
- TLSH T1A8363A2271E200AAC69D9031CF46973597E17C798FF1C3E7B245B6C92F725C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry