General
- Target 2026-07-18_e6bef49d743849cc6fa79fae7f0d86ca_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 4.2MB
- Sample260718-gpf5psds2x
- SHA256 4a12e71452a7d7c6754349bc1a80563897d952c45e3e126da2db1085b324ca97
- MD5 e6bef49d743849cc6fa79fae7f0d86ca
- SHA1 ebfb94f862e2e434f2fbe0d773c7a1a8e7a9b38e
- SHA512 6f5653b680e751c222d61205a5d73c31e0f83b51c885a5057ea2f6708c7a5d4e6590d264a424bd3072c9ee3fb0d3dfa261a586a3c729c54f045f45d0b63423bf
- SSDEEP 49152:tYRw5x6M1sYRw5x6M1xVOyh+Y0zyxF/ezSC6vUzPvMHjy:Su5x6M1Tu5x6M17hx0zIezSC6v2XMH
- TLSH T195164B66B1E14176D0AD9071CB966735FAF27C514FA087C78282F72C2F325D0AA3672B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_e6bef49d743849cc6fa79fae7f0d86ca_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_e6bef49d743849cc6fa79fae7f0d86ca_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_e6bef49d743849cc6fa79fae7f0d86ca_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 4.2MB
- SHA256 4a12e71452a7d7c6754349bc1a80563897d952c45e3e126da2db1085b324ca97
- MD5 e6bef49d743849cc6fa79fae7f0d86ca
- SHA1 ebfb94f862e2e434f2fbe0d773c7a1a8e7a9b38e
- SHA512 6f5653b680e751c222d61205a5d73c31e0f83b51c885a5057ea2f6708c7a5d4e6590d264a424bd3072c9ee3fb0d3dfa261a586a3c729c54f045f45d0b63423bf
- SSDEEP 49152:tYRw5x6M1sYRw5x6M1xVOyh+Y0zyxF/ezSC6vUzPvMHjy:Su5x6M1Tu5x6M17hx0zIezSC6v2XMH
- TLSH T195164B66B1E14176D0AD9071CB966735FAF27C514FA087C78282F72C2F325D0AA3672B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry