General
- Target 2026-07-30_e9463bd8578842206eb030b762a01b3b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 33.8MB
- Sample260730-bfqpwsap9y
- SHA256 5b9e4b7d3d71c9bdbcb0382dc9bfd3f3a602c2eb86f39848d7467407736c80b7
- MD5 e9463bd8578842206eb030b762a01b3b
- SHA1 f4599bfb9ddc02721cf84aa3bf39305598923a33
- SHA512 bff247934a7adf1917e683ddb9e8a174719e1caa02cafcd9e015427b723e1444da5c46dddf28ed34e98316b37ea38ac0256ac3bc4ee016f2e36dfbe1971e9d22
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6K/h1+Qw7wScITw7wScI6dw7wScITw7wSca:lYN5YNsYN5YNVWqQjp3
- TLSH T128776C22B1E200B5D1999030CF56933597E27C698BF187E7B245F7D92F325C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_e9463bd8578842206eb030b762a01b3b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_e9463bd8578842206eb030b762a01b3b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_e9463bd8578842206eb030b762a01b3b_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 33.8MB
- SHA256 5b9e4b7d3d71c9bdbcb0382dc9bfd3f3a602c2eb86f39848d7467407736c80b7
- MD5 e9463bd8578842206eb030b762a01b3b
- SHA1 f4599bfb9ddc02721cf84aa3bf39305598923a33
- SHA512 bff247934a7adf1917e683ddb9e8a174719e1caa02cafcd9e015427b723e1444da5c46dddf28ed34e98316b37ea38ac0256ac3bc4ee016f2e36dfbe1971e9d22
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6K/h1+Qw7wScITw7wScI6dw7wScITw7wSca:lYN5YNsYN5YNVWqQjp3
- TLSH T128776C22B1E200B5D1999030CF56933597E27C698BF187E7B245F7D92F325C07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry