General
- Target 2026-07-30_22b9706efccad2ef66f627a1b4b07d16_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.2MB
- Sample260730-glpbxavsbv
- SHA256 f12597e6d9b044168f835c17935e91dd4a5344ab00166e1cdf02c1c7ea0c19a4
- MD5 22b9706efccad2ef66f627a1b4b07d16
- SHA1 aaeb013beed0cba90ec2761a588d5f476fda35d7
- SHA512 8911cdc7b5460f006b64b36b150e77f844bcd2c1aac7a5aaad42c8ce40e7dcc32de33c8d98733750f26c31b8dccabf23a0fa198099eb40c0cb09eca260d06c01
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7Aj:JtcI4/h1+kov7AgtcI4/h1+kov7Aj
- TLSH T179864A22B1E14165D1AAC031CF969735D7B23C598BF0C7DB6245B2D92F336C0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_22b9706efccad2ef66f627a1b4b07d16_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_22b9706efccad2ef66f627a1b4b07d16_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_22b9706efccad2ef66f627a1b4b07d16_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.2MB
- SHA256 f12597e6d9b044168f835c17935e91dd4a5344ab00166e1cdf02c1c7ea0c19a4
- MD5 22b9706efccad2ef66f627a1b4b07d16
- SHA1 aaeb013beed0cba90ec2761a588d5f476fda35d7
- SHA512 8911cdc7b5460f006b64b36b150e77f844bcd2c1aac7a5aaad42c8ce40e7dcc32de33c8d98733750f26c31b8dccabf23a0fa198099eb40c0cb09eca260d06c01
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7Aj:JtcI4/h1+kov7AgtcI4/h1+kov7Aj
- TLSH T179864A22B1E14165D1AAC031CF969735D7B23C598BF0C7DB6245B2D92F336C0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry