General
- Target 2026-07-30_cf4a66f95e11e2e4727e5583f73d4560_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.2MB
- Sample260730-vgwr3swvfx
- SHA256 728dcf5126ff47f653897314bdbe810b5c71160bc45c10f31b9783a4990d1745
- MD5 cf4a66f95e11e2e4727e5583f73d4560
- SHA1 31468b6b29ea93a890ba9b9844d380004cb3b300
- SHA512 e1d6742d8322d62e616506e6b57848ff0b1ae99f0b1b99d2c7e3089fb39b6f6badd16dbfab04bf8250bd5b667653030eb7dde78c301b564862e2b81f3e240a66
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7A1D:JtcI4/h1+kov7AgtcI4/h1+kov7A1D
- TLSH T15F864A22B1E14165D1AAC031CF969735D7B23C598BF0C7DB6245B2D92F336C0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_cf4a66f95e11e2e4727e5583f73d4560_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_cf4a66f95e11e2e4727e5583f73d4560_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_cf4a66f95e11e2e4727e5583f73d4560_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.2MB
- SHA256 728dcf5126ff47f653897314bdbe810b5c71160bc45c10f31b9783a4990d1745
- MD5 cf4a66f95e11e2e4727e5583f73d4560
- SHA1 31468b6b29ea93a890ba9b9844d380004cb3b300
- SHA512 e1d6742d8322d62e616506e6b57848ff0b1ae99f0b1b99d2c7e3089fb39b6f6badd16dbfab04bf8250bd5b667653030eb7dde78c301b564862e2b81f3e240a66
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7A1D:JtcI4/h1+kov7AgtcI4/h1+kov7A1D
- TLSH T15F864A22B1E14165D1AAC031CF969735D7B23C598BF0C7DB6245B2D92F336C0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry