General
- Target 2026-08-01_b1bbad54b2a364d562fbf032e6edc392_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 24.1MB
- Sample260802-aaevrszdrb
- SHA256 5af6c69ff7e33246a495ee2fd8650db9be311af6b6c79188206df13177b21f0d
- MD5 b1bbad54b2a364d562fbf032e6edc392
- SHA1 5887d452161683a324010bf8af6c62dd26c971cd
- SHA512 210f71ce5cc9eff4191c100479ddd10d8efab9d3263d8a1774053dd4443328702da1959dc02433d3fd314f568fa064e800d7bba021fba4fc7ca8cb78b1c1bc34
- SSDEEP 786432:zyZ/K0ttYZTEqZyZ/K0tiyZ/K0ttYZTEqZyZ/K0tE:uZ/K0ttYREqQZ/K0tpZ/K0ttYREqQZ/W
- TLSH T1DC476B13F1E500E9D06AD178CB669232EB727C494BF1A6DF228076D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_b1bbad54b2a364d562fbf032e6edc392_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_b1bbad54b2a364d562fbf032e6edc392_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_b1bbad54b2a364d562fbf032e6edc392_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 24.1MB
- SHA256 5af6c69ff7e33246a495ee2fd8650db9be311af6b6c79188206df13177b21f0d
- MD5 b1bbad54b2a364d562fbf032e6edc392
- SHA1 5887d452161683a324010bf8af6c62dd26c971cd
- SHA512 210f71ce5cc9eff4191c100479ddd10d8efab9d3263d8a1774053dd4443328702da1959dc02433d3fd314f568fa064e800d7bba021fba4fc7ca8cb78b1c1bc34
- SSDEEP 786432:zyZ/K0ttYZTEqZyZ/K0tiyZ/K0ttYZTEqZyZ/K0tE:uZ/K0ttYREqQZ/K0tpZ/K0ttYREqQZ/W
- TLSH T1DC476B13F1E500E9D06AD178CB669232EB727C494BF1A6DF228076D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry