General
- Target 2026-08-01_a894325a398390da5130f28c4fd35e7d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.3MB
- Sample260801-tlehxssxht
- SHA256 9e760b8f5a388063c803d945934aebd2ca82b7845ff1bf61fac871a71d2285e4
- MD5 a894325a398390da5130f28c4fd35e7d
- SHA1 55ea7d3de9f5e63347e44d7f1de6e37dd01c933f
- SHA512 16220b602319260082fc0aaf23e9b9d1a0eda5ebffaffc7b65449d8a93cbda46353fd3a1ff1274fb29d0a9f224e5bdbdf493981f1aa6cfc721114542b1a8da93
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1++FpWyZ/K0tc:zyZ/K0ttYZTEqEmyZ/K0t
- TLSH T1B5D67C03F1A841E9D06AD178CB669732EB327C4947F1A5DF2280B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_a894325a398390da5130f28c4fd35e7d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_a894325a398390da5130f28c4fd35e7d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_a894325a398390da5130f28c4fd35e7d_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 12.3MB
- SHA256 9e760b8f5a388063c803d945934aebd2ca82b7845ff1bf61fac871a71d2285e4
- MD5 a894325a398390da5130f28c4fd35e7d
- SHA1 55ea7d3de9f5e63347e44d7f1de6e37dd01c933f
- SHA512 16220b602319260082fc0aaf23e9b9d1a0eda5ebffaffc7b65449d8a93cbda46353fd3a1ff1274fb29d0a9f224e5bdbdf493981f1aa6cfc721114542b1a8da93
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd0x/h1++FpWyZ/K0tc:zyZ/K0ttYZTEqEmyZ/K0t
- TLSH T1B5D67C03F1A841E9D06AD178CB669732EB327C4947F1A5DF2280B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry