General
- Target 2026-07-30_88368a3333e122e75bb9dd12ce075715_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 36.4MB
- Sample260730-drfp6s1zht
- SHA256 ef9ef515a026733dd82a6115ab793702991a759aed5ff28c86ccd70af0b2bb5b
- MD5 88368a3333e122e75bb9dd12ce075715
- SHA1 6faba142b9a0fb64ec61a3513fa7691a8b613eb7
- SHA512 8fb33efae09d6d5da051093c6524ee5eacd3f2765f200a4de8e17dd36fe9017c8b050d63bf09496ddf6fb668da2b94e93ee671e88ab2e03450380440f6db03a4
- SSDEEP 786432:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYZT/yZ/K0ttYZToE8c23pV2Xs:uZ/K0ttYR6Z/K0ttYRaZ/K0ttYR6Z/KW
- TLSH T1C4878D13F6E801E5E07AD174CA668232EB727C450BB1A6DF1250E79A1F37AD07E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_88368a3333e122e75bb9dd12ce075715_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_88368a3333e122e75bb9dd12ce075715_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_88368a3333e122e75bb9dd12ce075715_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 36.4MB
- SHA256 ef9ef515a026733dd82a6115ab793702991a759aed5ff28c86ccd70af0b2bb5b
- MD5 88368a3333e122e75bb9dd12ce075715
- SHA1 6faba142b9a0fb64ec61a3513fa7691a8b613eb7
- SHA512 8fb33efae09d6d5da051093c6524ee5eacd3f2765f200a4de8e17dd36fe9017c8b050d63bf09496ddf6fb668da2b94e93ee671e88ab2e03450380440f6db03a4
- SSDEEP 786432:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYZT/yZ/K0ttYZToE8c23pV2Xs:uZ/K0ttYR6Z/K0ttYRaZ/K0ttYR6Z/KW
- TLSH T1C4878D13F6E801E5E07AD174CA668232EB727C450BB1A6DF1250E79A1F37AD07E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application