General
- Target 2026-07-19_9b712f0647481cc2e4f4cb3623fa27a5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 12.7MB
- Sample260719-xmlkeahw2j
- SHA256 aa31020ad361fe6023d2eb4e7c88f6d58b215dff538ae45d5b79493c87c5d19b
- MD5 9b712f0647481cc2e4f4cb3623fa27a5
- SHA1 651f90f2da9c5881c1e72de867130b3266cec3d2
- SHA512 bc48ce9a4f5e751be992cb2c4116cd99e3a84c10095211f27a6af095ba7fe46f76f3b9fba6ff460574b0bf3223e32d9ef5ca7290390b5e11699571988d44a449
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+ABvyEYc/b3w8O:zyZ/K0ttYZTEqAvyEYKbi
- TLSH T173D65B13B6E440E5E06AD174CE668631EB727C464BF1A6DF2240B6D92F33AD07E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_9b712f0647481cc2e4f4cb3623fa27a5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_9b712f0647481cc2e4f4cb3623fa27a5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_9b712f0647481cc2e4f4cb3623fa27a5_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 12.7MB
- SHA256 aa31020ad361fe6023d2eb4e7c88f6d58b215dff538ae45d5b79493c87c5d19b
- MD5 9b712f0647481cc2e4f4cb3623fa27a5
- SHA1 651f90f2da9c5881c1e72de867130b3266cec3d2
- SHA512 bc48ce9a4f5e751be992cb2c4116cd99e3a84c10095211f27a6af095ba7fe46f76f3b9fba6ff460574b0bf3223e32d9ef5ca7290390b5e11699571988d44a449
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1+ABvyEYc/b3w8O:zyZ/K0ttYZTEqAvyEYKbi
- TLSH T173D65B13B6E440E5E06AD174CE668631EB727C464BF1A6DF2240B6D92F33AD07E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry