General
- Target 2026-07-30_d0f0cc88e08c6f7fa8a9dac044be46b0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.2MB
- Sample260730-vgbrxawvd1
- SHA256 eb28e6e77346011b6497a72979b9479458143bd3f75d7dc974ed194aef399231
- MD5 d0f0cc88e08c6f7fa8a9dac044be46b0
- SHA1 8993465a9219da0b538e73e4ebe61cc8a9b6dc56
- SHA512 22d0ebfb0ddbb2775ed54fa9f0ee41f9a2e1e2f956e4cca5e354810013c316623643046c4dbbf345e0060f2faf26e74468b8c3d5d7686323156724d70430408a
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7A1:JtcI4/h1+kov7AgtcI4/h1+kov7A1
- TLSH T1F7864A22B1E14165D1AAC031CF969735D7B23C598BF0C7DB6245B2D92F336C0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_d0f0cc88e08c6f7fa8a9dac044be46b0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_d0f0cc88e08c6f7fa8a9dac044be46b0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_d0f0cc88e08c6f7fa8a9dac044be46b0_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.2MB
- SHA256 eb28e6e77346011b6497a72979b9479458143bd3f75d7dc974ed194aef399231
- MD5 d0f0cc88e08c6f7fa8a9dac044be46b0
- SHA1 8993465a9219da0b538e73e4ebe61cc8a9b6dc56
- SHA512 22d0ebfb0ddbb2775ed54fa9f0ee41f9a2e1e2f956e4cca5e354810013c316623643046c4dbbf345e0060f2faf26e74468b8c3d5d7686323156724d70430408a
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7A1:JtcI4/h1+kov7AgtcI4/h1+kov7A1
- TLSH T1F7864A22B1E14165D1AAC031CF969735D7B23C598BF0C7DB6245B2D92F336C0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry