General
- Target 2026-07-19_2a080732043a926c13c299c8fbdcc7d8_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar
- Size 3.7MB
- Sample260719-28974sft5j
- SHA256 bdf77147689c2ec2fa33bcc4a2b84b96cbe3e5a5333044e3542545efd7ecf659
- MD5 2a080732043a926c13c299c8fbdcc7d8
- SHA1 beabcbaff81ef0275225f394e7d651e10aeadf63
- SHA512 89d9b1b3b19a13fec015c1d9a22c149dc5fd9c314ca167d7039cd715e1cc6cfc887272887b9bf4e5bcc8a9f3a78784b1c72aa7bb5c37a9d295616d1cba7bc294
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQFXp1qJtb2ImpYq:7IDQ/nW1PszRf6
- TLSH T13B066A12E6A78232EC779175CAA65265FA3338110B7086CB13C5EA7D2F33BD19975323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_2a080732043a926c13c299c8fbdcc7d8_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_2a080732043a926c13c299c8fbdcc7d8_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_2a080732043a926c13c299c8fbdcc7d8_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar
- Size 3.7MB
- SHA256 bdf77147689c2ec2fa33bcc4a2b84b96cbe3e5a5333044e3542545efd7ecf659
- MD5 2a080732043a926c13c299c8fbdcc7d8
- SHA1 beabcbaff81ef0275225f394e7d651e10aeadf63
- SHA512 89d9b1b3b19a13fec015c1d9a22c149dc5fd9c314ca167d7039cd715e1cc6cfc887272887b9bf4e5bcc8a9f3a78784b1c72aa7bb5c37a9d295616d1cba7bc294
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQFXp1qJtb2ImpYq:7IDQ/nW1PszRf6
- TLSH T13B066A12E6A78232EC779175CAA65265FA3338110B7086CB13C5EA7D2F33BD19975323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory