General
- Target 2026-08-02_0bbd43f135c4a7acd3de5db387536ddf_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 11.3MB
- Sample260802-12el7asgpf
- SHA256 87a1080e89d2364c734f0f99960ff1d40f9884ba071a6c08c72a8344daa204e3
- MD5 0bbd43f135c4a7acd3de5db387536ddf
- SHA1 f6989f6f9e59021db3ed8e0be880768636ad02ef
- SHA512 2f26abe3349508c5696f2f23b75f44fc2364ab65b511e18c97964c8a9f21eda943a4e3c9d5434135189e325887d4e73cdb41b4531dfff615f3771e4142abc747
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAAT/vyEYc/b3w8O:syZ/K0ttYZT/vyEYKbi
- TLSH T1CEC67C13F6E480F5E0A6D134CA769632EB727C464BB1A6CF1241E7992F336D06E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_0bbd43f135c4a7acd3de5db387536ddf_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_0bbd43f135c4a7acd3de5db387536ddf_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_0bbd43f135c4a7acd3de5db387536ddf_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 11.3MB
- SHA256 87a1080e89d2364c734f0f99960ff1d40f9884ba071a6c08c72a8344daa204e3
- MD5 0bbd43f135c4a7acd3de5db387536ddf
- SHA1 f6989f6f9e59021db3ed8e0be880768636ad02ef
- SHA512 2f26abe3349508c5696f2f23b75f44fc2364ab65b511e18c97964c8a9f21eda943a4e3c9d5434135189e325887d4e73cdb41b4531dfff615f3771e4142abc747
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAAT/vyEYc/b3w8O:syZ/K0ttYZT/vyEYKbi
- TLSH T1CEC67C13F6E480F5E0A6D134CA769632EB727C464BB1A6CF1241E7992F336D06E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry