General
- Target 2026-07-27_937c56ce6c75a8cf1e6e873fbd546355_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 32.5MB
- Sample260727-v1d2daxfkh
- SHA256 79f4db566c992b2e2e23ba5c499ea631ee72a8c0c23a794997f999eae1b57a77
- MD5 937c56ce6c75a8cf1e6e873fbd546355
- SHA1 59e3862b65ab3740b907d7dcac609e5c42618c21
- SHA512 1bdc122492430c74931b4301a90d4eebe548e744eb78de5ff267c38ef27f4ab002a3e99c87facb7cfe9bdb50f9c79e4f43d9c6045257ae9043e1affa49eb9761
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6Vw7wScITw7wScI6dw7wScITw7wScI66vy9:lYN5YNRYN5YN6vyEYKbi
- TLSH T150776C2271E100B6D6999030CF569335E7E27C698FF1C7E7A241F6D92F325C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_937c56ce6c75a8cf1e6e873fbd546355_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_937c56ce6c75a8cf1e6e873fbd546355_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_937c56ce6c75a8cf1e6e873fbd546355_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 32.5MB
- SHA256 79f4db566c992b2e2e23ba5c499ea631ee72a8c0c23a794997f999eae1b57a77
- MD5 937c56ce6c75a8cf1e6e873fbd546355
- SHA1 59e3862b65ab3740b907d7dcac609e5c42618c21
- SHA512 1bdc122492430c74931b4301a90d4eebe548e744eb78de5ff267c38ef27f4ab002a3e99c87facb7cfe9bdb50f9c79e4f43d9c6045257ae9043e1affa49eb9761
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6Vw7wScITw7wScI6dw7wScITw7wScI66vy9:lYN5YNRYN5YN6vyEYKbi
- TLSH T150776C2271E100B6D6999030CF569335E7E27C698FF1C7E7A241F6D92F325C07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry