General
- Target 2026-07-18_33caff6f13f26cd9e43ec252fb704bef_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.0MB
- Sample260718-3vv2psas6t
- SHA256 b206707ad34b89c517d93d00e4f27033af44f01c4eda0824e5927846b9dc2d1e
- MD5 33caff6f13f26cd9e43ec252fb704bef
- SHA1 88642a92cd7d01213b6e5ba39f4ad3239ca01e54
- SHA512 f9f9ec929da7035542a8df7ac11af9d39c1eca8c0fce82b0e8f3418cda81d30a01616fa94ea303f97b116b19724b963a240f4b0f0aa2c1b5a73f1f55d60528a1
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIB0oAaldmdmnp:Jw7wScI2Kmd0
- TLSH T182565B23B1E140A9D299D030CF469235D7A27C6D8BF197EB7241B6D52F736C03B3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_33caff6f13f26cd9e43ec252fb704bef_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_33caff6f13f26cd9e43ec252fb704bef_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_33caff6f13f26cd9e43ec252fb704bef_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.0MB
- SHA256 b206707ad34b89c517d93d00e4f27033af44f01c4eda0824e5927846b9dc2d1e
- MD5 33caff6f13f26cd9e43ec252fb704bef
- SHA1 88642a92cd7d01213b6e5ba39f4ad3239ca01e54
- SHA512 f9f9ec929da7035542a8df7ac11af9d39c1eca8c0fce82b0e8f3418cda81d30a01616fa94ea303f97b116b19724b963a240f4b0f0aa2c1b5a73f1f55d60528a1
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIB0oAaldmdmnp:Jw7wScI2Kmd0
- TLSH T182565B23B1E140A9D299D030CF469235D7A27C6D8BF197EB7241B6D52F736C03B3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry