General
- Target 2026-07-17_5f19c0b3e72cf310f7a37c9f26acd90c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 9.3MB
- Sample260718-d8hwvsfs2l
- SHA256 31504c8deef8337616d0f40acddf04e7e1dabdfacd97911d2805c1aec078a3d1
- MD5 5f19c0b3e72cf310f7a37c9f26acd90c
- SHA1 84fb05facb40cca9fc6d65adaf7f08184c1fe2d8
- SHA512 d32ecef7e3cad2c7d9422ed0af24645ceb4c6d18e35ed932278f078017d10774554230fc6f32ba6c01321f698f4b9480988099759f8f998f354a241978edb05e
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnpz/h1+ARb/h1+:JSWyZ/K0ttYVAAT1Kmd0x/h1+Ah/h1+
- TLSH T181A67C13F1A441E9E06AD174CE669631EB327C494BF1A5EF3240B6D82E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_5f19c0b3e72cf310f7a37c9f26acd90c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_5f19c0b3e72cf310f7a37c9f26acd90c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_5f19c0b3e72cf310f7a37c9f26acd90c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 9.3MB
- SHA256 31504c8deef8337616d0f40acddf04e7e1dabdfacd97911d2805c1aec078a3d1
- MD5 5f19c0b3e72cf310f7a37c9f26acd90c
- SHA1 84fb05facb40cca9fc6d65adaf7f08184c1fe2d8
- SHA512 d32ecef7e3cad2c7d9422ed0af24645ceb4c6d18e35ed932278f078017d10774554230fc6f32ba6c01321f698f4b9480988099759f8f998f354a241978edb05e
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnpz/h1+ARb/h1+:JSWyZ/K0ttYVAAT1Kmd0x/h1+Ah/h1+
- TLSH T181A67C13F1A441E9E06AD174CE669631EB327C494BF1A5EF3240B6D82E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry