General
- Target 2026-07-31_179555b82927111f87e16d07798d4840_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.8MB
- Sample260731-xttjlaer5v
- SHA256 047c0a310b103f2b1e51f4d7546eacfa89874870040b00a68d69dfad0f29c398
- MD5 179555b82927111f87e16d07798d4840
- SHA1 a421e63ba82a90144b84db446b82148b5076012b
- SHA512 de167ce6f0d94d2c54f4e1d2817d32caa263f2fdaf9cd6c8d21af49a625c0f3348973256c695019852906d2e05a9eecea9be8dd119f9e6cd115b5db2af8c54cf
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09osxWyZ/K0ttYVAAT:zyZ/K0ttYZTEqTRyZ/K0ttYZT
- TLSH T195D66B03F2A941E9E0AAD174CE669231DB327C594BF1A5EF324076D42E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_179555b82927111f87e16d07798d4840_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_179555b82927111f87e16d07798d4840_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_179555b82927111f87e16d07798d4840_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.8MB
- SHA256 047c0a310b103f2b1e51f4d7546eacfa89874870040b00a68d69dfad0f29c398
- MD5 179555b82927111f87e16d07798d4840
- SHA1 a421e63ba82a90144b84db446b82148b5076012b
- SHA512 de167ce6f0d94d2c54f4e1d2817d32caa263f2fdaf9cd6c8d21af49a625c0f3348973256c695019852906d2e05a9eecea9be8dd119f9e6cd115b5db2af8c54cf
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09osxWyZ/K0ttYVAAT:zyZ/K0ttYZTEqTRyZ/K0ttYZT
- TLSH T195D66B03F2A941E9E0AAD174CE669231DB327C594BF1A5EF324076D42E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry