General
- Target 2026-07-18_671e2743161028ff00e23581f0927476_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 7.8MB
- Sample260718-3s617afv4k
- SHA256 935d74ba38a376e48542e8e809669ebd7486bb1da7304169b8ec14ec259d3e6e
- MD5 671e2743161028ff00e23581f0927476
- SHA1 3e73b944c2ecc498a29b2f0ed9f53e83a076b347
- SHA512 c9f8a23e88fc151669f2d804f652cdc00b4151368dfd8d918032515d049545d811c6d60af4f390be07cf0265f738e520d415b36bb657b24791372a41da3d3fe3
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIFWQtZ/K0tGOFWVRuLftCT:Jw7wScIFWyZ/K0ttYVAAT
- TLSH T151866B13B1E500A9E199D134CF6693319BB27C598BF196EF3240B6D42F32AD07B39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_671e2743161028ff00e23581f0927476_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_671e2743161028ff00e23581f0927476_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_671e2743161028ff00e23581f0927476_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 7.8MB
- SHA256 935d74ba38a376e48542e8e809669ebd7486bb1da7304169b8ec14ec259d3e6e
- MD5 671e2743161028ff00e23581f0927476
- SHA1 3e73b944c2ecc498a29b2f0ed9f53e83a076b347
- SHA512 c9f8a23e88fc151669f2d804f652cdc00b4151368dfd8d918032515d049545d811c6d60af4f390be07cf0265f738e520d415b36bb657b24791372a41da3d3fe3
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIFWQtZ/K0tGOFWVRuLftCT:Jw7wScIFWyZ/K0ttYVAAT
- TLSH T151866B13B1E500A9E199D134CF6693319BB27C598BF196EF3240B6D42F32AD07B39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry