General
- Target 2026-07-20_1ed2b8491c47927b262372edd62e132a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 395KB
- Sample260720-ge76fafy5n
- SHA256 38f4447952bb4741f80675d80ee64e2e9e3f8da546cef639dda01d81982b4602
- MD5 1ed2b8491c47927b262372edd62e132a
- SHA1 4221e9243b409327deb7fe13fc9e19b158526048
- SHA512 bfdf88c4f08b5fda42a7d8732ca2c70bb36f884d2bc3401add4b1031f151d4bc5e7919b8d99b1096bb1481078f01598141ddcaf5ee51e6163cdb2849aa97c312
- SSDEEP 6144:GjuDOhVLS5nj+CUXIYdqtiP/aK2h9H/B+biiuW1FXEf:GaoVmp+j4YdqcP/aK2vB+WiuWXa
- TLSH T140846B1236F0447AF0B35A315C769B7187BAFC329A21D66F67902F5C2E30980DA25B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_1ed2b8491c47927b262372edd62e132a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_1ed2b8491c47927b262372edd62e132a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_1ed2b8491c47927b262372edd62e132a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 395KB
- SHA256 38f4447952bb4741f80675d80ee64e2e9e3f8da546cef639dda01d81982b4602
- MD5 1ed2b8491c47927b262372edd62e132a
- SHA1 4221e9243b409327deb7fe13fc9e19b158526048
- SHA512 bfdf88c4f08b5fda42a7d8732ca2c70bb36f884d2bc3401add4b1031f151d4bc5e7919b8d99b1096bb1481078f01598141ddcaf5ee51e6163cdb2849aa97c312
- SSDEEP 6144:GjuDOhVLS5nj+CUXIYdqtiP/aK2h9H/B+biiuW1FXEf:GaoVmp+j4YdqcP/aK2vB+WiuWXa
- TLSH T140846B1236F0447AF0B35A315C769B7187BAFC329A21D66F67902F5C2E30980DA25B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory