General
- Target 2026-07-20_d06d530b5f486f6e403d59f38f07e784_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.8MB
- Sample260720-y6zrtafy7s
- SHA256 9d0370003a5c81ff978192b76a240ca22446b087e0169ad277c9e63e5771f4ec
- MD5 d06d530b5f486f6e403d59f38f07e784
- SHA1 1f529add1d6e409ef449fea256e939ef12bc5439
- SHA512 58676f8f57f27344ca0246507eb70c51fef6c0c6d5d74bda6067b58229f7f48f523823fb206dae00450039ccff4d76292638da289ba5c8b50882ba58a1c77a80
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp+joTRQ:JSWyZ/K0ttYVAAT1Kmd0eoTa
- TLSH T148966B03F1A541E9E0AAD174CE669231EB327C594BF1A6EF324076D52E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_d06d530b5f486f6e403d59f38f07e784_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_d06d530b5f486f6e403d59f38f07e784_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_d06d530b5f486f6e403d59f38f07e784_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 8.8MB
- SHA256 9d0370003a5c81ff978192b76a240ca22446b087e0169ad277c9e63e5771f4ec
- MD5 d06d530b5f486f6e403d59f38f07e784
- SHA1 1f529add1d6e409ef449fea256e939ef12bc5439
- SHA512 58676f8f57f27344ca0246507eb70c51fef6c0c6d5d74bda6067b58229f7f48f523823fb206dae00450039ccff4d76292638da289ba5c8b50882ba58a1c77a80
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp+joTRQ:JSWyZ/K0ttYVAAT1Kmd0eoTa
- TLSH T148966B03F1A541E9E0AAD174CE669231EB327C594BF1A6EF324076D52E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry