General
- Target 2026-07-18_39a3b4f23ae9279ff4d5575795b59f1f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.1MB
- Sample260718-bh58csfs5y
- SHA256 698545513e8b0045c967076a15b5360f164520d774edbf5558bdf20514ec857d
- MD5 39a3b4f23ae9279ff4d5575795b59f1f
- SHA1 74ffc75147b5e4ebf9ed3fbcb843b22c63f1f497
- SHA512 668336c84771cdceefc11f9f8d355b01301a1382b47895379570ff381c067eccc288ff54c378ed20f48079e4c7a6708f78b287d7eb40e3321e8e63ac3fd9aa7b
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIB0oAaldmdmnpgu5x6M1cIu5x6M1cSLapIB0oAaldmd9:Jw7wScI2Kmd0hw7wScI2Kmd0YD
- TLSH T19ED65B23B1E140A9D299D030CF469235D7A27C6D8BF197EB7241B6D52F736C03B3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_39a3b4f23ae9279ff4d5575795b59f1f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_39a3b4f23ae9279ff4d5575795b59f1f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_39a3b4f23ae9279ff4d5575795b59f1f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.1MB
- SHA256 698545513e8b0045c967076a15b5360f164520d774edbf5558bdf20514ec857d
- MD5 39a3b4f23ae9279ff4d5575795b59f1f
- SHA1 74ffc75147b5e4ebf9ed3fbcb843b22c63f1f497
- SHA512 668336c84771cdceefc11f9f8d355b01301a1382b47895379570ff381c067eccc288ff54c378ed20f48079e4c7a6708f78b287d7eb40e3321e8e63ac3fd9aa7b
- SSDEEP 98304:Su5x6M1cIu5x6M1cSLapIB0oAaldmdmnpgu5x6M1cIu5x6M1cSLapIB0oAaldmd9:Jw7wScI2Kmd0hw7wScI2Kmd0YD
- TLSH T19ED65B23B1E140A9D299D030CF469235D7A27C6D8BF197EB7241B6D52F736C03B3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry