General
- Target 2026-07-28_db940ee22fd2d6cd6f6e6c516691fdd8_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 20.0MB
- Sample260728-yk91nawvbx
- SHA256 5ed7b29dc7bd9cd9980521bbcae51e943d5ffc74708bc7915e3b5f70eac0085f
- MD5 db940ee22fd2d6cd6f6e6c516691fdd8
- SHA1 7d9141b90c92707819f6ba44e5f82e6ff6e60e99
- SHA512 d8dd528bd12110de99db399af3e43f4ec16d16800720ec1f3d2d8fe75a44133d1cb7fcea3e45be2c59879bc6617c03ade10bd0d6592f7be32a3770bd18183c98
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0eoNcITSWyZ/K0ttYVAAT1Kmd0eoNcIE:zyZ/K0ttYZTEq0+CyZ/K0ttYZTEq0+B
- TLSH T1F6275A13F1E500A9D19AD134CF6682319BA27C598BF1A6EF3240B6D52F33AD07B39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_db940ee22fd2d6cd6f6e6c516691fdd8_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_db940ee22fd2d6cd6f6e6c516691fdd8_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_db940ee22fd2d6cd6f6e6c516691fdd8_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 20.0MB
- SHA256 5ed7b29dc7bd9cd9980521bbcae51e943d5ffc74708bc7915e3b5f70eac0085f
- MD5 db940ee22fd2d6cd6f6e6c516691fdd8
- SHA1 7d9141b90c92707819f6ba44e5f82e6ff6e60e99
- SHA512 d8dd528bd12110de99db399af3e43f4ec16d16800720ec1f3d2d8fe75a44133d1cb7fcea3e45be2c59879bc6617c03ade10bd0d6592f7be32a3770bd18183c98
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0eoNcITSWyZ/K0ttYVAAT1Kmd0eoNcIE:zyZ/K0ttYZTEq0+CyZ/K0ttYZTEq0+B
- TLSH T1F6275A13F1E500A9D19AD134CF6682319BA27C598BF1A6EF3240B6D52F33AD07B39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application