General
- Target 2026-07-19_b59b8d57a5a80559e73033058e0db6c0_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 11.7MB
- Sample260720-a3ny5sat9l
- SHA256 d32274f2ea27cc80c3d612fc72dbd80aa0313c7b18ed37b133b1c020ad0e52bf
- MD5 b59b8d57a5a80559e73033058e0db6c0
- SHA1 4fed516881d4fc1422aa58262bf0a64c8ebdd0cd
- SHA512 ee62a84b2b37ab5f4b50235de06c3cc7de193b8fccdd78cc03facff35d44de40eac7033e8c89befc3952a4ffd2cadce34d8b1e438defd74f40566014f3515861
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDkl0u5x6M1WoDDklJ6qCu5x6M1WoDDkla/h1+:Qi8kLri8kBi8kLri8kk/h1+
- TLSH T167C69E42B6E4417AE17F4A30D6769636AA77BC420B11C7CF56D4F62E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_b59b8d57a5a80559e73033058e0db6c0_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_b59b8d57a5a80559e73033058e0db6c0_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_b59b8d57a5a80559e73033058e0db6c0_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar
- Size 11.7MB
- SHA256 d32274f2ea27cc80c3d612fc72dbd80aa0313c7b18ed37b133b1c020ad0e52bf
- MD5 b59b8d57a5a80559e73033058e0db6c0
- SHA1 4fed516881d4fc1422aa58262bf0a64c8ebdd0cd
- SHA512 ee62a84b2b37ab5f4b50235de06c3cc7de193b8fccdd78cc03facff35d44de40eac7033e8c89befc3952a4ffd2cadce34d8b1e438defd74f40566014f3515861
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDkl0u5x6M1WoDDklJ6qCu5x6M1WoDDkla/h1+:Qi8kLri8kBi8kLri8kk/h1+
- TLSH T167C69E42B6E4417AE17F4A30D6769636AA77BC420B11C7CF56D4F62E2E327C09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry