General
- Target 2026-07-30_a4edd9579cca01c0a6bc2e93fc6fa3c9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 22.6MB
- Sample260730-dlfg8abr2s
- SHA256 15d67bb9f0ec56e48e5532748e99ee8c6f7a6f80a62fd4694930cdc8c9a6af7e
- MD5 a4edd9579cca01c0a6bc2e93fc6fa3c9
- SHA1 078c7bf3a9f3ec757728345ea2a3f5606fd005ab
- SHA512 f85525cb1408011e7255d6666d8dee12546b8a60b6baec552daea17aad9c6cdbd9aaa61021c2db567c9b7d4669210cf049c483aa887db2d4eecfaf690390d993
- SSDEEP 393216:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYZT/yZ/K0ttYZTG:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYY
- TLSH T1B2376B03F2E541E9E0AAD174CE759731AB327C5A4BF1A5DF2240B6D41E36AD07B38722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_a4edd9579cca01c0a6bc2e93fc6fa3c9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_a4edd9579cca01c0a6bc2e93fc6fa3c9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_a4edd9579cca01c0a6bc2e93fc6fa3c9_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 22.6MB
- SHA256 15d67bb9f0ec56e48e5532748e99ee8c6f7a6f80a62fd4694930cdc8c9a6af7e
- MD5 a4edd9579cca01c0a6bc2e93fc6fa3c9
- SHA1 078c7bf3a9f3ec757728345ea2a3f5606fd005ab
- SHA512 f85525cb1408011e7255d6666d8dee12546b8a60b6baec552daea17aad9c6cdbd9aaa61021c2db567c9b7d4669210cf049c483aa887db2d4eecfaf690390d993
- SSDEEP 393216:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYZT/yZ/K0ttYZTG:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYY
- TLSH T1B2376B03F2E541E9E0AAD174CE759731AB327C5A4BF1A5DF2240B6D41E36AD07B38722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application