General
- Target 2026-07-20_27fe67c9198020f5d1621e3ef2b0b9f2_amadey_elex_emotet_icedid_njrat_remcos
- Size 4.7MB
- Sample260720-tl2y8afy3k
- SHA256 56194793d157bae564c6f66f444b345b3c1ca294a14347d6c56d80bfd8602e59
- MD5 27fe67c9198020f5d1621e3ef2b0b9f2
- SHA1 eabccad751ef565cc1ad8652e27bc3956f8c113d
- SHA512 2aa88c86271a54ec26139809cec3c821b6e565093d4dd13ee2d8f644de251e83610e17bbcdb0fe32f134fa24ef93bfbbf55bafaf172e255d6cb43fe1ba1fe65e
- SSDEEP 49152:tYRw5x6M1t/KCGZd0qgNEf16lhulJLirqtpbCVtQqGJVdf6AqR/ezSC6vUzPvMHm:Su5x6M1uWQLtWa7qxezSC6v2XMH
- TLSH T117366B23F1E541AAC069D075CB96A731EAF23C514F70A7CB4241B7152F37AD0AB3972A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_27fe67c9198020f5d1621e3ef2b0b9f2_amadey_elex_emotet_icedid_njrat_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_27fe67c9198020f5d1621e3ef2b0b9f2_amadey_elex_emotet_icedid_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_27fe67c9198020f5d1621e3ef2b0b9f2_amadey_elex_emotet_icedid_njrat_remcos
- Size 4.7MB
- SHA256 56194793d157bae564c6f66f444b345b3c1ca294a14347d6c56d80bfd8602e59
- MD5 27fe67c9198020f5d1621e3ef2b0b9f2
- SHA1 eabccad751ef565cc1ad8652e27bc3956f8c113d
- SHA512 2aa88c86271a54ec26139809cec3c821b6e565093d4dd13ee2d8f644de251e83610e17bbcdb0fe32f134fa24ef93bfbbf55bafaf172e255d6cb43fe1ba1fe65e
- SSDEEP 49152:tYRw5x6M1t/KCGZd0qgNEf16lhulJLirqtpbCVtQqGJVdf6AqR/ezSC6vUzPvMHm:Su5x6M1uWQLtWa7qxezSC6v2XMH
- TLSH T117366B23F1E541AAC069D075CB96A731EAF23C514F70A7CB4241B7152F37AD0AB3972A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry