General
- Target 2026-08-02_b5766e0c05f3c48d1e9ce009774a9e00_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 7.9MB
- Sample260802-vn11dattcz
- SHA256 27506a9a2fc6847b3e4901f6e2e5ba3fe7180e9bbf31fe04bd7dc5a300823b82
- MD5 b5766e0c05f3c48d1e9ce009774a9e00
- SHA1 f9ea4e606120d62fb99578fc8b3d6cb85e97e88b
- SHA512 a26adc50fcc55e8dc2ce376e10c78932529f0b11029384d9fc16045fe2acc649b217833669f414250e2bafc3ad812034d8e456469dd0e9f71ceee86483e45394
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+WWQtZ/K0tGOFWVRuLftCT3/h1+:Jw/h1+Qw/h1+WWyZ/K0ttYVAAT3/h1+
- TLSH T1F4867C13F1A441B5E066D174CAA29736EB327C464BB196CF2241B7D82E37AD0BB39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_b5766e0c05f3c48d1e9ce009774a9e00_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_b5766e0c05f3c48d1e9ce009774a9e00_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_b5766e0c05f3c48d1e9ce009774a9e00_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 7.9MB
- SHA256 27506a9a2fc6847b3e4901f6e2e5ba3fe7180e9bbf31fe04bd7dc5a300823b82
- MD5 b5766e0c05f3c48d1e9ce009774a9e00
- SHA1 f9ea4e606120d62fb99578fc8b3d6cb85e97e88b
- SHA512 a26adc50fcc55e8dc2ce376e10c78932529f0b11029384d9fc16045fe2acc649b217833669f414250e2bafc3ad812034d8e456469dd0e9f71ceee86483e45394
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+WWQtZ/K0tGOFWVRuLftCT3/h1+:Jw/h1+Qw/h1+WWyZ/K0ttYVAAT3/h1+
- TLSH T1F4867C13F1A441B5E066D174CAA29736EB327C464BB196CF2241B7D82E37AD0BB39731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry