General
- Target 2026-08-03_25986deea0d33d917456f422d28abc8a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 18.4MB
- Sample260803-xbb7lawcnc
- SHA256 a3541a8d1b8c6d69026c2feccbb59f87a2813a31c626778963e7155a456db867
- MD5 25986deea0d33d917456f422d28abc8a
- SHA1 4c6d49c66a3944f024ba9abf0fa49c9d0083e6df
- SHA512 1642cd507371e5726392251b379852ffcc99420fa058817b1287aa42f60247d17ae54dc89ff3bd0e0e5ce44a9a9c74e39686baadde8a08b74ba7b1e5a780fe54
- SSDEEP 98304:Su5x6M1pLapIAu5x6M1pLapIIoqTezSC6v2XMHtLapIAu5x6M1pLapIAu5x6M1pt:JtcITtcIIO6cITtcITtcIIO6cIEoK
- TLSH T172173A22B1E100A6C19DD071CF469735E7E23C698FF097EBB145B2D92F325D07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_25986deea0d33d917456f422d28abc8a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_25986deea0d33d917456f422d28abc8a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_25986deea0d33d917456f422d28abc8a_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 18.4MB
- SHA256 a3541a8d1b8c6d69026c2feccbb59f87a2813a31c626778963e7155a456db867
- MD5 25986deea0d33d917456f422d28abc8a
- SHA1 4c6d49c66a3944f024ba9abf0fa49c9d0083e6df
- SHA512 1642cd507371e5726392251b379852ffcc99420fa058817b1287aa42f60247d17ae54dc89ff3bd0e0e5ce44a9a9c74e39686baadde8a08b74ba7b1e5a780fe54
- SSDEEP 98304:Su5x6M1pLapIAu5x6M1pLapIIoqTezSC6v2XMHtLapIAu5x6M1pLapIAu5x6M1pt:JtcITtcIIO6cITtcITtcIIO6cIEoK
- TLSH T172173A22B1E100A6C19DD071CF469735E7E23C698FF097EBB145B2D92F325D07A3A61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry