General
- Target 2026-07-24_7286055c19a69c5d5ef7fa42cd0f7ca4_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 10.0MB
- Sample260724-l96nbaxerd
- SHA256 2d7ce52d1670da6310051e6a8c08b6c354134feea12643f45f7b6a5d088a79c5
- MD5 7286055c19a69c5d5ef7fa42cd0f7ca4
- SHA1 9afbead93de125506beeb18bc08a66bcb54c7edb
- SHA512 7e813543137be5811c6b3c16fff3ffd3c8b7f9313837229da9ee3b477300d2daf0686c8007130a0450d3243a4129c4cffe4ad110cadd16da4814032c3a84ef15
- SSDEEP 98304:Su5x6M1c/h1+tZzPB3u5x6M1c/h1+tZzPBCw0oAaldmdmnp:Jw/h1+Sw/h1+A9Kmd0
- TLSH T123B68D13F19540E9D069C074CB469232EB72BC490BB1A6EF2791B7D52E37AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_7286055c19a69c5d5ef7fa42cd0f7ca4_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_7286055c19a69c5d5ef7fa42cd0f7ca4_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_7286055c19a69c5d5ef7fa42cd0f7ca4_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 10.0MB
- SHA256 2d7ce52d1670da6310051e6a8c08b6c354134feea12643f45f7b6a5d088a79c5
- MD5 7286055c19a69c5d5ef7fa42cd0f7ca4
- SHA1 9afbead93de125506beeb18bc08a66bcb54c7edb
- SHA512 7e813543137be5811c6b3c16fff3ffd3c8b7f9313837229da9ee3b477300d2daf0686c8007130a0450d3243a4129c4cffe4ad110cadd16da4814032c3a84ef15
- SSDEEP 98304:Su5x6M1c/h1+tZzPB3u5x6M1c/h1+tZzPBCw0oAaldmdmnp:Jw/h1+Sw/h1+A9Kmd0
- TLSH T123B68D13F19540E9D069C074CB469232EB72BC490BB1A6EF2791B7D52E37AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry