General
- Target 2026-07-29_a64394ea1a9ac614d72764e6a3bfca2a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 29.2MB
- Sample260729-j47mbafb64
- SHA256 9facdd5e9eaa30e17c60fd561b5c0dea50343ca7ae14d9d944f1fdd91b873f8d
- MD5 a64394ea1a9ac614d72764e6a3bfca2a
- SHA1 cbaa9b23470357cbf50feb9429a613afac684946
- SHA512 04466ccd0ab7aea337b2a5997f9e7beb478c28c4ad17322aca1d19904f8066be75d5df42b44b09808f6d31d96feedd61ad67e2201d40a5c9ccc81e24686b8088
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6Vw7wScITw7wScI6dw7wScITw7wScI6d/hQ:lYN5YNRYN5YN
- TLSH T1FB675C62B1E200B6C6999030CF45933597E27C698BF1C7E7B245F6D92F325C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_a64394ea1a9ac614d72764e6a3bfca2a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_a64394ea1a9ac614d72764e6a3bfca2a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_a64394ea1a9ac614d72764e6a3bfca2a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 29.2MB
- SHA256 9facdd5e9eaa30e17c60fd561b5c0dea50343ca7ae14d9d944f1fdd91b873f8d
- MD5 a64394ea1a9ac614d72764e6a3bfca2a
- SHA1 cbaa9b23470357cbf50feb9429a613afac684946
- SHA512 04466ccd0ab7aea337b2a5997f9e7beb478c28c4ad17322aca1d19904f8066be75d5df42b44b09808f6d31d96feedd61ad67e2201d40a5c9ccc81e24686b8088
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6Vw7wScITw7wScI6dw7wScITw7wScI6d/hQ:lYN5YNRYN5YN
- TLSH T1FB675C62B1E200B6C6999030CF45933597E27C698BF1C7E7B245F6D92F325C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application