General
- Target 2026-07-29_415a4a774998be5551ba59b889d3209b_amadey_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 16.6MB
- Sample260729-kd8blacn7t
- SHA256 fc9f3063c676c157005d8e5b59bf4b1b9c75994189d529ab4b8dda76d26c743a
- MD5 415a4a774998be5551ba59b889d3209b
- SHA1 16e874d4b8f6fc8f173d69afb7c06b76aea0cb64
- SHA512 eed633a585b507abe291a9f647a458ee74e6d62dedc7e38840e0da904f52ba49a60539859308ff096d77c46d68d744aefeff75f3dc017f692170a565d661160f
- SSDEEP 196608:Jw/h1+Sw/h1+C/h1+Qw/h1+Sw/h1+C/h1+z:o
- TLSH T1B1078D17F1A541F5D06AC075C786A632FA727C451B30A6CF0781F7692F37AE09A3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_415a4a774998be5551ba59b889d3209b_amadey_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_415a4a774998be5551ba59b889d3209b_amadey_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_415a4a774998be5551ba59b889d3209b_amadey_cobalt-strike_elex_emotet_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 16.6MB
- SHA256 fc9f3063c676c157005d8e5b59bf4b1b9c75994189d529ab4b8dda76d26c743a
- MD5 415a4a774998be5551ba59b889d3209b
- SHA1 16e874d4b8f6fc8f173d69afb7c06b76aea0cb64
- SHA512 eed633a585b507abe291a9f647a458ee74e6d62dedc7e38840e0da904f52ba49a60539859308ff096d77c46d68d744aefeff75f3dc017f692170a565d661160f
- SSDEEP 196608:Jw/h1+Sw/h1+C/h1+Qw/h1+Sw/h1+C/h1+z:o
- TLSH T1B1078D17F1A541F5D06AC075C786A632FA727C451B30A6CF0781F7692F37AE09A3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry