General
- Target 2026-07-19_73b71b8e39f1b75f493cfa82673988e5_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry
- Size 11.2MB
- Sample260720-bmqcpsa19r
- SHA256 1475defc4471859cf225fcd209de3a572c5241a63d63e00c5e5a555e648e7466
- MD5 73b71b8e39f1b75f493cfa82673988e5
- SHA1 442ac449986138d6567dee23bd5e2473c0a5485f
- SHA512 ea5be7a42af0a458b0c620bda6d7256ba8f690860d98196851054f30f6bfacfb5029964ed9589bdcdb52558faa1bf964311d8fca2c921f19fbc04e14e789570d
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJcu5x6M1WoDDklJ6qCu5x6M1WoDDklJ3:Qi8kLri8kLPi8kLri8kL3
- TLSH T1ABC69D42B7E4407EF1BB4A30953A96329A76BD820B11DBCF56D4F61E2D327C09A31367
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_73b71b8e39f1b75f493cfa82673988e5_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_73b71b8e39f1b75f493cfa82673988e5_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_73b71b8e39f1b75f493cfa82673988e5_amadey_cobalt-strike_elex_emotet_icedid_remcos_vidar_wannacry
- Size 11.2MB
- SHA256 1475defc4471859cf225fcd209de3a572c5241a63d63e00c5e5a555e648e7466
- MD5 73b71b8e39f1b75f493cfa82673988e5
- SHA1 442ac449986138d6567dee23bd5e2473c0a5485f
- SHA512 ea5be7a42af0a458b0c620bda6d7256ba8f690860d98196851054f30f6bfacfb5029964ed9589bdcdb52558faa1bf964311d8fca2c921f19fbc04e14e789570d
- SSDEEP 98304:nu5x6M1WoDDklJ6qCu5x6M1WoDDklJcu5x6M1WoDDklJ6qCu5x6M1WoDDklJ3:Qi8kLri8kLPi8kLri8kL3
- TLSH T1ABC69D42B7E4407EF1BB4A30953A96329A76BD820B11DBCF56D4F61E2D327C09A31367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry