General
- Target 2026-08-04_d29eaed1a288f77a938e7a74c33545dd_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 22.3MB
- Sample260804-15979syzhv
- SHA256 4b5b0d23f5bbf7fc82fe97fce74d79f57644c82894cbde2f480a1f863f597f4e
- MD5 d29eaed1a288f77a938e7a74c33545dd
- SHA1 c1da47d9c56274e054b5dae1264b9ecea1152dff
- SHA512 303ec261755556b5edf7689ee5b9305c70c38cc184f22c80ba887515883892face6c13964aab934b212ca3b13d00daf654a6ec0d5c2a278d5fdfc8031bddb7ff
- SSDEEP 196608:JtcITtcIIONWyZ/K0ttYVAATwtcITtcIIONWyZ/K0ttYVAATlD:IBhhyZ/K0ttYZT5BhhyZ/K0ttYZTlD
- TLSH T129376B13B1E100A9D1AAD074CF669731E7B27C598BF096EB7140B2D92F33AD07A39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_d29eaed1a288f77a938e7a74c33545dd_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_d29eaed1a288f77a938e7a74c33545dd_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_d29eaed1a288f77a938e7a74c33545dd_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 22.3MB
- SHA256 4b5b0d23f5bbf7fc82fe97fce74d79f57644c82894cbde2f480a1f863f597f4e
- MD5 d29eaed1a288f77a938e7a74c33545dd
- SHA1 c1da47d9c56274e054b5dae1264b9ecea1152dff
- SHA512 303ec261755556b5edf7689ee5b9305c70c38cc184f22c80ba887515883892face6c13964aab934b212ca3b13d00daf654a6ec0d5c2a278d5fdfc8031bddb7ff
- SSDEEP 196608:JtcITtcIIONWyZ/K0ttYVAATwtcITtcIIONWyZ/K0ttYVAATlD:IBhhyZ/K0ttYZT5BhhyZ/K0ttYZTlD
- TLSH T129376B13B1E100A9D1AAD074CF669731E7B27C598BF096EB7140B2D92F33AD07A39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application