General
- Target 2026-07-19_b9cc013ced233b81e7f43849c3083415_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar
- Size 3.4MB
- Sample260720-a2kkbscz3v
- SHA256 e34f75267aee4d828ed1ac4d4753d3f5847c436a009e62db811d05e515c208a5
- MD5 b9cc013ced233b81e7f43849c3083415
- SHA1 4f37aa95436b704609ff32cc296d0651fa15081a
- SHA512 a5fa2aa5ae08bd2a6f26254a3d9001e9eedc89eaaddbba7b0a768cd99918d40f3cf2edc9230951d743c2b001b202efd3f664cecae4d0d745e6ea06843ff7e5f6
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQFXp1qJtb2IQ:7IDQ/nW1PszRH
- TLSH T1BFF55A12E6A74276EC6F5171CBA65265BA3778110BF086CB13C4EA3D1F32BC199B5323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_b9cc013ced233b81e7f43849c3083415_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_b9cc013ced233b81e7f43849c3083415_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_b9cc013ced233b81e7f43849c3083415_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar
- Size 3.4MB
- SHA256 e34f75267aee4d828ed1ac4d4753d3f5847c436a009e62db811d05e515c208a5
- MD5 b9cc013ced233b81e7f43849c3083415
- SHA1 4f37aa95436b704609ff32cc296d0651fa15081a
- SHA512 a5fa2aa5ae08bd2a6f26254a3d9001e9eedc89eaaddbba7b0a768cd99918d40f3cf2edc9230951d743c2b001b202efd3f664cecae4d0d745e6ea06843ff7e5f6
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQFXp1qJtb2IQ:7IDQ/nW1PszRH
- TLSH T1BFF55A12E6A74276EC6F5171CBA65265BA3778110BF086CB13C4EA3D1F32BC199B5323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory