General
- Target 2026-07-27_ca67fdaf395d947fa0cecd4ecd0f9f7c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 28.5MB
- Sample260727-vx2chaap5z
- SHA256 df1e6d4552e22f75c7aec3cc3336e714ea7ce54981f1438d540332e235bbc343
- MD5 ca67fdaf395d947fa0cecd4ecd0f9f7c
- SHA1 d21f1ab426e23effbc833af9911600c382388707
- SHA512 e70156ae92257d03ea913bc1c2167d0e5cf537fe8e5fb71088cdc6f51562bd1588be01b84905520153b9e18009ec79456f26939f4eac4fe30ad6df81502216b3
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6Vw7wScITw7wScI6dw7wScITw7wScI6M:lYN5YNRYN5YNM
- TLSH T18F675C62B1E200B6C6999030CF45933597E27C698BF1C7E7B245F6D92F325C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_ca67fdaf395d947fa0cecd4ecd0f9f7c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_ca67fdaf395d947fa0cecd4ecd0f9f7c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_ca67fdaf395d947fa0cecd4ecd0f9f7c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 28.5MB
- SHA256 df1e6d4552e22f75c7aec3cc3336e714ea7ce54981f1438d540332e235bbc343
- MD5 ca67fdaf395d947fa0cecd4ecd0f9f7c
- SHA1 d21f1ab426e23effbc833af9911600c382388707
- SHA512 e70156ae92257d03ea913bc1c2167d0e5cf537fe8e5fb71088cdc6f51562bd1588be01b84905520153b9e18009ec79456f26939f4eac4fe30ad6df81502216b3
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6Vw7wScITw7wScI6dw7wScITw7wScI6M:lYN5YNRYN5YNM
- TLSH T18F675C62B1E200B6C6999030CF45933597E27C698BF1C7E7B245F6D92F325C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry