General
- Target 2026-07-20_6466010d41801f88a00cef47104ee073_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260720-v7bjtshz2k
- SHA256 d3e8392020fdfbc7d9a82dfb7d7b785c59a4927297fa3799c4b9b7697f6d57a6
- MD5 6466010d41801f88a00cef47104ee073
- SHA1 9fa02dec2e47aebea5a40070ed823aeb492e6558
- SHA512 a80d5d44a04bf8f213c10caa5d42789b354b255e11930acf2ad1ac7bb2665b001fbad77331a74c2cf8e683ccdf117af0077f6bc824de8d5cfcf494fdec5f1ae3
- SSDEEP 12288:GaoVmp+84YWE+66uTHJ/J+kvvcLIb1M/Bo1lBISiuWXH:GDVmpzywxx+1L6goLGSiuWXH
- TLSH T16BD46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_6466010d41801f88a00cef47104ee073_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_6466010d41801f88a00cef47104ee073_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_6466010d41801f88a00cef47104ee073_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 d3e8392020fdfbc7d9a82dfb7d7b785c59a4927297fa3799c4b9b7697f6d57a6
- MD5 6466010d41801f88a00cef47104ee073
- SHA1 9fa02dec2e47aebea5a40070ed823aeb492e6558
- SHA512 a80d5d44a04bf8f213c10caa5d42789b354b255e11930acf2ad1ac7bb2665b001fbad77331a74c2cf8e683ccdf117af0077f6bc824de8d5cfcf494fdec5f1ae3
- SSDEEP 12288:GaoVmp+84YWE+66uTHJ/J+kvvcLIb1M/Bo1lBISiuWXH:GDVmpzywxx+1L6goLGSiuWXH
- TLSH T16BD46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory