General
- Target 2026-07-20_b57ee23150b660d88b293daa3aeb836b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 24.8MB
- Sample260720-kxdw4act3q
- SHA256 76a13733d6c42007475da6dedb32646d03fa089082d7b3004dda2d17bb4e3c16
- MD5 b57ee23150b660d88b293daa3aeb836b
- SHA1 33ba30cf555212ba1cd5b4bfea8b20c295636009
- SHA512 8e92d99af51b92291a4becfc627bd3fe80d80e356dacfdc1500b6b593ccc5adc199b5e23535a6d371e77ab4b324cf573bc88b08a99ba8106c5895756af891492
- SSDEEP 196608:JtcI4/h1+QtcI4/h1+vtcI4/h1+QtcI4/h1+SGStcI4/h1+QtcI4/h1+vtcI4/hZ:IEvEOEvEO
- TLSH T175474A22B1E14065C1A99031CF86973597E23C698FF1C7E7B205B7D92F725C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_b57ee23150b660d88b293daa3aeb836b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_b57ee23150b660d88b293daa3aeb836b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_b57ee23150b660d88b293daa3aeb836b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 24.8MB
- SHA256 76a13733d6c42007475da6dedb32646d03fa089082d7b3004dda2d17bb4e3c16
- MD5 b57ee23150b660d88b293daa3aeb836b
- SHA1 33ba30cf555212ba1cd5b4bfea8b20c295636009
- SHA512 8e92d99af51b92291a4becfc627bd3fe80d80e356dacfdc1500b6b593ccc5adc199b5e23535a6d371e77ab4b324cf573bc88b08a99ba8106c5895756af891492
- SSDEEP 196608:JtcI4/h1+QtcI4/h1+vtcI4/h1+QtcI4/h1+SGStcI4/h1+QtcI4/h1+vtcI4/hZ:IEvEOEvEO
- TLSH T175474A22B1E14065C1A99031CF86973597E23C698FF1C7E7B205B7D92F725C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application