General
- Target 2026-07-20_5f798a3c41f92814ff71f68c9ae76a35_amadey_elex_emotet_icedid_njrat_remcos
- Size 4.5MB
- Sample260720-v8eymsbw6w
- SHA256 4eaccc81cf00bc7e2aa8a2b0402bfe2bbf14593c65b25221303a225fa6ed557e
- MD5 5f798a3c41f92814ff71f68c9ae76a35
- SHA1 5a98f10d91e91203bac992a064e6721094c8b5df
- SHA512 7e029020c95143471c49583ab6bc6b68a32cbfb3c708affbf08daf6e877a224a0ea1837a669331be6cda25c036a62959fa4fa9c0a3ab7bde114acc226ab569b9
- SSDEEP 49152:tYRw5x6M1t/KCGZd0qgNEf16lhulJLirqtpbCVtQqGJVdf6AqGVO88hXl+:Su5x6M1uWQLtWa7qh/h1+
- TLSH T180266B23F1E240A9C059D0758B96A732EAF27C514F70E7CB4241B7152F77AD0AB3972A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_5f798a3c41f92814ff71f68c9ae76a35_amadey_elex_emotet_icedid_njrat_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_5f798a3c41f92814ff71f68c9ae76a35_amadey_elex_emotet_icedid_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_5f798a3c41f92814ff71f68c9ae76a35_amadey_elex_emotet_icedid_njrat_remcos
- Size 4.5MB
- SHA256 4eaccc81cf00bc7e2aa8a2b0402bfe2bbf14593c65b25221303a225fa6ed557e
- MD5 5f798a3c41f92814ff71f68c9ae76a35
- SHA1 5a98f10d91e91203bac992a064e6721094c8b5df
- SHA512 7e029020c95143471c49583ab6bc6b68a32cbfb3c708affbf08daf6e877a224a0ea1837a669331be6cda25c036a62959fa4fa9c0a3ab7bde114acc226ab569b9
- SSDEEP 49152:tYRw5x6M1t/KCGZd0qgNEf16lhulJLirqtpbCVtQqGJVdf6AqGVO88hXl+:Su5x6M1uWQLtWa7qh/h1+
- TLSH T180266B23F1E240A9C059D0758B96A732EAF27C514F70E7CB4241B7152F77AD0AB3972A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry