General
- Target 2026-07-30_76a31d3cb163d4e698c76a4672404ff4_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 22.5MB
- Sample260730-dt4vsacj5v
- SHA256 0e24a23fe183d74baad8cda6dfb7815dae4617af4e271f4684366fa9fdb29d96
- MD5 76a31d3cb163d4e698c76a4672404ff4
- SHA1 56a1a0f509881053347b4c847432aaf89f13e12a
- SHA512 2c735438bd2e41bc5ee90b63b004ba3969470fb9117c69ec2f459880f9d7f087d5a737f7883715ea3f048b427d0abec2740db2a7194c4c50f810ead0417c9d24
- SSDEEP 393216:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYZT/yZ/K0ttYZTOj:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYW
- TLSH T14A376B03F2E541E9E0AAD174CE7697319B32BC5A4BF1A5DF224076D42E36AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_76a31d3cb163d4e698c76a4672404ff4_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_76a31d3cb163d4e698c76a4672404ff4_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_76a31d3cb163d4e698c76a4672404ff4_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 22.5MB
- SHA256 0e24a23fe183d74baad8cda6dfb7815dae4617af4e271f4684366fa9fdb29d96
- MD5 76a31d3cb163d4e698c76a4672404ff4
- SHA1 56a1a0f509881053347b4c847432aaf89f13e12a
- SHA512 2c735438bd2e41bc5ee90b63b004ba3969470fb9117c69ec2f459880f9d7f087d5a737f7883715ea3f048b427d0abec2740db2a7194c4c50f810ead0417c9d24
- SSDEEP 393216:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYZT/yZ/K0ttYZTOj:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYW
- TLSH T14A376B03F2E541E9E0AAD174CE7697319B32BC5A4BF1A5DF224076D42E36AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application