General
- Target 2026-07-23_963d6f934504f0696732b8eb9d4f044f_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar
- Size 4.2MB
- Sample260723-1cs4aav1ey
- SHA256 30bed0192756cebc8e0534c2b06cfafb4a1bb6a0c18bf2f376bf384e36603d5f
- MD5 963d6f934504f0696732b8eb9d4f044f
- SHA1 6d850d568bb81ca16d04d2059f7d4df918aa7fea
- SHA512 627452d1d7f04f7752d35b84fbf3c431413245ca1a00d5600de8a57f6c877d3caa1572e4f95a29edc6889d0e2fc2377147862b125868053d7b93d8fa4e635052
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQUhOxW1PszNsQEpYq456rapYq:7IDQ/nW1PszI+W1Pszo6gra6
- TLSH T11F166A02E7A74675EC7BA134CAA65265AA3738110F708ACF1384E97D2F33BD19935327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_963d6f934504f0696732b8eb9d4f044f_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_963d6f934504f0696732b8eb9d4f044f_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_963d6f934504f0696732b8eb9d4f044f_amadey_cobalt-strike_elex_emotet_hijackloader_remcos_smoke-loader_stop_vidar
- Size 4.2MB
- SHA256 30bed0192756cebc8e0534c2b06cfafb4a1bb6a0c18bf2f376bf384e36603d5f
- MD5 963d6f934504f0696732b8eb9d4f044f
- SHA1 6d850d568bb81ca16d04d2059f7d4df918aa7fea
- SHA512 627452d1d7f04f7752d35b84fbf3c431413245ca1a00d5600de8a57f6c877d3caa1572e4f95a29edc6889d0e2fc2377147862b125868053d7b93d8fa4e635052
- SSDEEP 49152:O/4MnYYJ2ZhqSGLHkJEM/nW1PszNsQUhOxW1PszNsQEpYq456rapYq:7IDQ/nW1PszI+W1Pszo6gra6
- TLSH T11F166A02E7A74675EC7BA134CAA65265AA3738110F708ACF1384E97D2F33BD19935327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory