General
- Target 2026-07-31_4d7891a46aff86808fe2a5ade3f6503d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.2MB
- Sample260731-w3bjpsdr4v
- SHA256 574a29d594b948ba47363a63a30567d51ee7c02e007f83b5505d8127089925d2
- MD5 4d7891a46aff86808fe2a5ade3f6503d
- SHA1 848fffadb38c0134218d65d2d281bce7b8ec3cc5
- SHA512 256eb6112630bcca0fbf4c28a1e7f8516ff0d51b72579312bfffda526f79deea39eead6e6e9b7e53dd6ccf20e2bf7244815232396aa830b66da7c98bcfb7ca41
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7Anj:JtcI4/h1+kov7AgtcI4/h1+kov7Anj
- TLSH T1EA864A22B1E14165D1AAC031CF969735D7B23C598BF0C7DB6245B2D92F336C0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_4d7891a46aff86808fe2a5ade3f6503d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_4d7891a46aff86808fe2a5ade3f6503d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_4d7891a46aff86808fe2a5ade3f6503d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 8.2MB
- SHA256 574a29d594b948ba47363a63a30567d51ee7c02e007f83b5505d8127089925d2
- MD5 4d7891a46aff86808fe2a5ade3f6503d
- SHA1 848fffadb38c0134218d65d2d281bce7b8ec3cc5
- SHA512 256eb6112630bcca0fbf4c28a1e7f8516ff0d51b72579312bfffda526f79deea39eead6e6e9b7e53dd6ccf20e2bf7244815232396aa830b66da7c98bcfb7ca41
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7Anj:JtcI4/h1+kov7AgtcI4/h1+kov7Anj
- TLSH T1EA864A22B1E14165D1AAC031CF969735D7B23C598BF0C7DB6245B2D92F336C0BA3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry