General
- Target 2026-07-30_2d81fc9cf8600d5d2f86e9d0054c8526_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 4.1MB
- Sample260730-wk5d3adc52
- SHA256 9246a56e5979cb6634d1ff6151f783097d5ba5aa5279010a0d864bdf26a0faef
- MD5 2d81fc9cf8600d5d2f86e9d0054c8526
- SHA1 ca1f0d98c4a7cc882023709ee60241a2e6d528c2
- SHA512 931e7166b58e3c28993e18aa3f3381acab75ee946f5c43805e16bc8d7845233f37b0bf53bd2cb0c87cf185a552aba203ade1cb04cc97ad26c74e5964dc7c8979
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTUVO88hXl+UPji0Aj6I86A6:Su5x6M1pLapI4/h1+yjov7A
- TLSH T1B6164A22B1E14165D1AAC031CF969735D7B23C598BF0C7DB6245B2D92F336C0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_2d81fc9cf8600d5d2f86e9d0054c8526_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_2d81fc9cf8600d5d2f86e9d0054c8526_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njr.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_2d81fc9cf8600d5d2f86e9d0054c8526_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar_wannacry
- Size 4.1MB
- SHA256 9246a56e5979cb6634d1ff6151f783097d5ba5aa5279010a0d864bdf26a0faef
- MD5 2d81fc9cf8600d5d2f86e9d0054c8526
- SHA1 ca1f0d98c4a7cc882023709ee60241a2e6d528c2
- SHA512 931e7166b58e3c28993e18aa3f3381acab75ee946f5c43805e16bc8d7845233f37b0bf53bd2cb0c87cf185a552aba203ade1cb04cc97ad26c74e5964dc7c8979
- SSDEEP 49152:tYRw5x6M1vgjI45TMwwapIgTUVO88hXl+UPji0Aj6I86A6:Su5x6M1pLapI4/h1+yjov7A
- TLSH T1B6164A22B1E14165D1AAC031CF969735D7B23C598BF0C7DB6245B2D92F336C0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry