General
- Target 2026-07-30_53f87f9481935ea9d3829411cf80074d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 56.8MB
- Sample260730-bwkhtaaa84
- SHA256 d37afab509309c4ac7e3b7b0a9d3153e1f448572e08aa34ea90d8dda7a087d05
- MD5 53f87f9481935ea9d3829411cf80074d
- SHA1 db0151b02fc994cfd0969673a702592bcc960b92
- SHA512 3e0bf2a2d0ab9a61a35c86f4ceee89de9e33b3544ff8774288a63ff04f996865559d717f50e857f82930a0f48e06802d65fb11fe1ba4f3606ff159fc263c5a9f
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6Vw7wScITw7wScI6dw7wScITw7wScI6Ow7y:lYN5YNRYN5YNuYN5YNRYN5YNp
- TLSH T1EDD75C62B1E200B6C6999030CF45933597E27C698BF1C7E7B245F6D92F325C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_53f87f9481935ea9d3829411cf80074d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_53f87f9481935ea9d3829411cf80074d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_53f87f9481935ea9d3829411cf80074d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 56.8MB
- SHA256 d37afab509309c4ac7e3b7b0a9d3153e1f448572e08aa34ea90d8dda7a087d05
- MD5 53f87f9481935ea9d3829411cf80074d
- SHA1 db0151b02fc994cfd0969673a702592bcc960b92
- SHA512 3e0bf2a2d0ab9a61a35c86f4ceee89de9e33b3544ff8774288a63ff04f996865559d717f50e857f82930a0f48e06802d65fb11fe1ba4f3606ff159fc263c5a9f
- SSDEEP 196608:Jw7wScITw7wScI6dw7wScITw7wScI6Vw7wScITw7wScI6dw7wScITw7wScI6Ow7y:lYN5YNRYN5YNuYN5YNRYN5YNp
- TLSH T1EDD75C62B1E200B6C6999030CF45933597E27C698BF1C7E7B245F6D92F325C07A3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry