General
- Target 2026-08-03_2f941888a0e2b04b3f7043a3e5791199_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 342KB
- Sample260803-dcfrma1vcy
- SHA256 044d4d7631d4ce0a10c7aee1def7acff805c5ff8e39e724fe5b8dec13f3f8bd9
- MD5 2f941888a0e2b04b3f7043a3e5791199
- SHA1 50a2def0af3a46a9e3e7388a9fd586f1e1c94eee
- SHA512 62f95bc4b31bb92658ae0d3afeb7c4158167b417c8d2b30dbae8fae92056038b9ec87852d13dd36b9c3d58ca706d545a6324485d603b93219df075ad9cb52761
- SSDEEP 6144:GjuDOhVLS5nj+CPXIY8EXAe6QPqksB+EYDiuW1FXEM:GaoVmp+84Y82Ae6D1B+EYDiuWXh
- TLSH T123747C1136D08FB1E1AF443148A59E748BBBFC304E219BDB63947E2D3E31981DA26767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_2f941888a0e2b04b3f7043a3e5791199_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_2f941888a0e2b04b3f7043a3e5791199_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_2f941888a0e2b04b3f7043a3e5791199_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_nymaim_rhadamanthys
- Size 342KB
- SHA256 044d4d7631d4ce0a10c7aee1def7acff805c5ff8e39e724fe5b8dec13f3f8bd9
- MD5 2f941888a0e2b04b3f7043a3e5791199
- SHA1 50a2def0af3a46a9e3e7388a9fd586f1e1c94eee
- SHA512 62f95bc4b31bb92658ae0d3afeb7c4158167b417c8d2b30dbae8fae92056038b9ec87852d13dd36b9c3d58ca706d545a6324485d603b93219df075ad9cb52761
- SSDEEP 6144:GjuDOhVLS5nj+CPXIY8EXAe6QPqksB+EYDiuW1FXEM:GaoVmp+84Y82Ae6D1B+EYDiuWXh
- TLSH T123747C1136D08FB1E1AF443148A59E748BBBFC304E219BDB63947E2D3E31981DA26767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory