General
- Target 2026-07-30_944513f2da5e6011b5e0db5934abb82e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 56.8MB
- Sample260730-brg7wsaa32
- SHA256 3389e9786253bca237334de23243600209135b4d782e30870d272c3549d53b3c
- MD5 944513f2da5e6011b5e0db5934abb82e
- SHA1 e898ea2c65503cb13e72b0d64ed437426eda99b2
- SHA512 09fd075ec0ada3f5dde0a38e004186674a3fce018e855f8a15d5709e06e166ba36cb1c660e7eb19829121d9ce3665ab06a98dd85c96ae77f09b6732408a12062
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6Vw7wScITw7wScI6dw7wScITw7wScI6Ow7v:lYN5YNRYN5YNuYN5YNRYN5YNc
- TLSH T129D75C62B1E200B6C6999030CF45933597E27C698BF1C7E7B245F6D92F325C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_944513f2da5e6011b5e0db5934abb82e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_944513f2da5e6011b5e0db5934abb82e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_944513f2da5e6011b5e0db5934abb82e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 56.8MB
- SHA256 3389e9786253bca237334de23243600209135b4d782e30870d272c3549d53b3c
- MD5 944513f2da5e6011b5e0db5934abb82e
- SHA1 e898ea2c65503cb13e72b0d64ed437426eda99b2
- SHA512 09fd075ec0ada3f5dde0a38e004186674a3fce018e855f8a15d5709e06e166ba36cb1c660e7eb19829121d9ce3665ab06a98dd85c96ae77f09b6732408a12062
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6Vw7wScITw7wScI6dw7wScITw7wScI6Ow7v:lYN5YNRYN5YNuYN5YNRYN5YNc
- TLSH T129D75C62B1E200B6C6999030CF45933597E27C698BF1C7E7B245F6D92F325C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry