General
- Target 2026-07-27_cf56a110c93f85069dc4770246d73c8f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.0MB
- Sample260727-rjc6zavscs
- SHA256 01471719517a40fc593a3c272f5f27bb4e1347c764630fc20bffe4d36c7b6e4e
- MD5 cf56a110c93f85069dc4770246d73c8f
- SHA1 b1797e942b77337ecb7d2fba42a5d6bf2f8fdda3
- SHA512 328686dd7e01c38de23fb53097e82874d7e8bb3c3dfcdde0866ed97853a63ca6940d4b090e93a7bf5084b86ed0dac682336b38f9da92267e2bb4bfd120e6bb1d
- SSDEEP 49152:tYRw5x6M1t/KCGZd0qgNEf16lhulJLirqtpbCVtQqGJVdf6AqqbrUzFjGMV/Dy9v:Su5x6M1uWQLtWa7q5LxDy
- TLSH T141367B23B1E200E9C05DD0758B4A9332EAE27C664F70A7DF4251B7161F77AE06B3971A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_cf56a110c93f85069dc4770246d73c8f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_cf56a110c93f85069dc4770246d73c8f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_cf56a110c93f85069dc4770246d73c8f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 5.0MB
- SHA256 01471719517a40fc593a3c272f5f27bb4e1347c764630fc20bffe4d36c7b6e4e
- MD5 cf56a110c93f85069dc4770246d73c8f
- SHA1 b1797e942b77337ecb7d2fba42a5d6bf2f8fdda3
- SHA512 328686dd7e01c38de23fb53097e82874d7e8bb3c3dfcdde0866ed97853a63ca6940d4b090e93a7bf5084b86ed0dac682336b38f9da92267e2bb4bfd120e6bb1d
- SSDEEP 49152:tYRw5x6M1t/KCGZd0qgNEf16lhulJLirqtpbCVtQqGJVdf6AqqbrUzFjGMV/Dy9v:Su5x6M1uWQLtWa7q5LxDy
- TLSH T141367B23B1E200E9C05DD0758B4A9332EAE27C664F70A7DF4251B7161F77AE06B3971A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry