General
- Target 2026-08-02_d1fd8e5ae9d02a3378f490feedb8a629_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.7MB
- Sample260802-3mc6xstenh
- SHA256 ccf51007049c1898c042c340765d2cd6cb58f8285a72bcb7d7e7934fbaf0833a
- MD5 d1fd8e5ae9d02a3378f490feedb8a629
- SHA1 12079d53dc6f3210fbb1c8b69fb2f78f9f6782cb
- SHA512 dcec67b998c14b9d19eda8c17f04234720979842660ec9cfe8e348aea09e19b5aa1f752b12ba958c2424ea96ef509399b08c40d391008b1347f217f940c605c6
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAATww/h1+Qw/h1+WWyZ/K0ttYVAATBKz:syZ/K0ttYZTtyZ/K0ttYZTBK
- TLSH T127F67C13F1E540A9E0AAD174CB669332DB727C564BB096CF2240B7D42E37AD07B39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_d1fd8e5ae9d02a3378f490feedb8a629_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_d1fd8e5ae9d02a3378f490feedb8a629_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_d1fd8e5ae9d02a3378f490feedb8a629_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 15.7MB
- SHA256 ccf51007049c1898c042c340765d2cd6cb58f8285a72bcb7d7e7934fbaf0833a
- MD5 d1fd8e5ae9d02a3378f490feedb8a629
- SHA1 12079d53dc6f3210fbb1c8b69fb2f78f9f6782cb
- SHA512 dcec67b998c14b9d19eda8c17f04234720979842660ec9cfe8e348aea09e19b5aa1f752b12ba958c2424ea96ef509399b08c40d391008b1347f217f940c605c6
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAATww/h1+Qw/h1+WWyZ/K0ttYVAATBKz:syZ/K0ttYZTtyZ/K0ttYZTBK
- TLSH T127F67C13F1E540A9E0AAD174CB669332DB727C564BB096CF2240B7D42E37AD07B39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry