General
- Target 2026-08-02_aebc4c2e77a733e67109f614fb7744dd_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 18.0MB
- Sample260802-vrzaystvdy
- SHA256 9d837ca875d77d67900437e4dbc99b1a4d4d69c9b7ff7d7a3390e2b7265c84c3
- MD5 aebc4c2e77a733e67109f614fb7744dd
- SHA1 a734b5f45d0aaa47cb8142add6b77a72e24ed3d9
- SHA512 5d7c061476186f98cd289d36ae2569002fcc9a9a4d6ae8222e1eca6729bc4f8e782f726578e4d2a4bb515c2c1a6e4265762ec7ce0b4e27edbaa374820c35b779
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09oQSSWyZ/K0ttYVAAT1Kmd09oQj:zyZ/K0ttYZTEqTjyZ/K0ttYZTEqTa
- TLSH T12C176B03F29441E9E16AD174CF669631EB327C4947F1A5EF2280B6E52E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_aebc4c2e77a733e67109f614fb7744dd_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_aebc4c2e77a733e67109f614fb7744dd_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_aebc4c2e77a733e67109f614fb7744dd_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 18.0MB
- SHA256 9d837ca875d77d67900437e4dbc99b1a4d4d69c9b7ff7d7a3390e2b7265c84c3
- MD5 aebc4c2e77a733e67109f614fb7744dd
- SHA1 a734b5f45d0aaa47cb8142add6b77a72e24ed3d9
- SHA512 5d7c061476186f98cd289d36ae2569002fcc9a9a4d6ae8222e1eca6729bc4f8e782f726578e4d2a4bb515c2c1a6e4265762ec7ce0b4e27edbaa374820c35b779
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09oQSSWyZ/K0ttYVAAT1Kmd09oQj:zyZ/K0ttYZTEqTjyZ/K0ttYZTEqTa
- TLSH T12C176B03F29441E9E16AD174CF669631EB327C4947F1A5EF2280B6E52E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry