General
- Target 2026-07-27_685df3494250eacf0c558a8d145cdf38_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 13.8MB
- Sample260727-kagdpsbp9y
- SHA256 653284ea22b0da8a3ad0a48b513fed7fb6c6c0f07ce02bae460558c6960fcf7d
- MD5 685df3494250eacf0c558a8d145cdf38
- SHA1 33669fd4e0a7e2644b7fa778b121c11c0e2c3aa5
- SHA512 8b2f8623b954dbb57da73dfb7357a594e1f2192dfa383733fb7773809a997c9b69527eb0184b1de0531b7a3105ab62e254cfd8e93ff66666be48c31cc819239c
- SSDEEP 196608:Jw7wScI2Kmd0hw7wScI2Kmd0/AL9/h1+:lKq4Kqoo
- TLSH T1DCE66B23B1E140A9D199C030CF469235D7A27C598BF197EB7241B6D92F336D07B3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_685df3494250eacf0c558a8d145cdf38_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_685df3494250eacf0c558a8d145cdf38_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_685df3494250eacf0c558a8d145cdf38_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 13.8MB
- SHA256 653284ea22b0da8a3ad0a48b513fed7fb6c6c0f07ce02bae460558c6960fcf7d
- MD5 685df3494250eacf0c558a8d145cdf38
- SHA1 33669fd4e0a7e2644b7fa778b121c11c0e2c3aa5
- SHA512 8b2f8623b954dbb57da73dfb7357a594e1f2192dfa383733fb7773809a997c9b69527eb0184b1de0531b7a3105ab62e254cfd8e93ff66666be48c31cc819239c
- SSDEEP 196608:Jw7wScI2Kmd0hw7wScI2Kmd0/AL9/h1+:lKq4Kqoo
- TLSH T1DCE66B23B1E140A9D199C030CF469235D7A27C598BF197EB7241B6D92F336D07B3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry