General
- Target 2026-07-28_6073e16af1439ef9fb4d7ef04c61aa0f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- Sample260728-2vyl6abm2y
- SHA256 1fdd8925ed77225bc9d477b97d8f386269198529af0fc452b93b3a22bd83a44b
- MD5 6073e16af1439ef9fb4d7ef04c61aa0f
- SHA1 93c1e10609ca8f1f8a235780424cb7725a7903a9
- SHA512 c10625cbd8b461dbcf33f0267017304846ee0551f3e429c96773c25313af0ed62f521c8e6e012f410ae23dcfcd167a3c5883dbde1e86a846e8eadcf4a9eccfea
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWX5:GDVmpzKwxx+1L6goYq1iuWX5
- TLSH T192D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_6073e16af1439ef9fb4d7ef04c61aa0f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_6073e16af1439ef9fb4d7ef04c61aa0f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_6073e16af1439ef9fb4d7ef04c61aa0f_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys
- Size 596KB
- SHA256 1fdd8925ed77225bc9d477b97d8f386269198529af0fc452b93b3a22bd83a44b
- MD5 6073e16af1439ef9fb4d7ef04c61aa0f
- SHA1 93c1e10609ca8f1f8a235780424cb7725a7903a9
- SHA512 c10625cbd8b461dbcf33f0267017304846ee0551f3e429c96773c25313af0ed62f521c8e6e012f410ae23dcfcd167a3c5883dbde1e86a846e8eadcf4a9eccfea
- SSDEEP 12288:GaoVmp+84YOE+66uTHJ/J+kvvcLIb1M/Bo0lBM1iuWX5:GDVmpzKwxx+1L6goYq1iuWX5
- TLSH T192D46B1176D0CF31E2AF053699659AB85A7FBC208F2087CB63947E1DBE306C19A35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory