General
- Target 2026-08-01_74491fcc199ae06466348f0f624ff149_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 9.4MB
- Sample260801-t5f6vs1cmc
- SHA256 f3f0b53b00ce7a1371ce0a7d76b3711aae157dd32383d02027c292352755303c
- MD5 74491fcc199ae06466348f0f624ff149
- SHA1 d2be42a700559ace6049f23bc435edb463354097
- SHA512 c90679ae35a39ebf8b2c5b5ca83c91a0cccf05c32fcd7aa4a0b23bcd9c6a6a0338db7196e9d6c0305146db5f01cf405a006a0a620e268ea9447cca8eeddd1963
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7AXhx0z:JtcI4/h1+kov7AgtcI4/h1+kov7AxKz
- TLSH T1D2A63922B1E10165C0AA9031CF969735D7F23C658BF0C7DBA245B2D92F735D07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_74491fcc199ae06466348f0f624ff149_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_74491fcc199ae06466348f0f624ff149_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_74491fcc199ae06466348f0f624ff149_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 9.4MB
- SHA256 f3f0b53b00ce7a1371ce0a7d76b3711aae157dd32383d02027c292352755303c
- MD5 74491fcc199ae06466348f0f624ff149
- SHA1 d2be42a700559ace6049f23bc435edb463354097
- SHA512 c90679ae35a39ebf8b2c5b5ca83c91a0cccf05c32fcd7aa4a0b23bcd9c6a6a0338db7196e9d6c0305146db5f01cf405a006a0a620e268ea9447cca8eeddd1963
- SSDEEP 98304:Su5x6M1pLapI4/h1+yjov7AXu5x6M1pLapI4/h1+yjov7AXhx0z:JtcI4/h1+kov7AgtcI4/h1+kov7AxKz
- TLSH T1D2A63922B1E10165C0AA9031CF969735D7F23C658BF0C7DBA245B2D92F735D07A3A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry