General
- Target 2026-08-04_73703bbf6bfd1b3acb592362bd2c918e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 22.3MB
- Sample260804-2rlhesscqd
- SHA256 24de73c0b0d95117c190b282a3e9a016f7727365b5da6b214d6e03ec18fc75ee
- MD5 73703bbf6bfd1b3acb592362bd2c918e
- SHA1 7ec8d66a251bc5ef677865dee651fa3db709ef16
- SHA512 340a146385a94bdc1ed1bc1b3755745c2f7f31d1d76387e38a032f7bd014ccb5abbacf3a4a02f1b98b382926306ccf0117d06376cc21892a9dd9142d5c72294c
- SSDEEP 196608:JtcITtcIIONWyZ/K0ttYVAATwtcITtcIIONWyZ/K0ttYVAAT/:IBhhyZ/K0ttYZT5BhhyZ/K0ttYZT/
- TLSH T104376B13B1E100A9D1AAD074CF669731E7B27C598BF096EB7140B2D92F33AD07A39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_73703bbf6bfd1b3acb592362bd2c918e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_73703bbf6bfd1b3acb592362bd2c918e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_73703bbf6bfd1b3acb592362bd2c918e_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 22.3MB
- SHA256 24de73c0b0d95117c190b282a3e9a016f7727365b5da6b214d6e03ec18fc75ee
- MD5 73703bbf6bfd1b3acb592362bd2c918e
- SHA1 7ec8d66a251bc5ef677865dee651fa3db709ef16
- SHA512 340a146385a94bdc1ed1bc1b3755745c2f7f31d1d76387e38a032f7bd014ccb5abbacf3a4a02f1b98b382926306ccf0117d06376cc21892a9dd9142d5c72294c
- SSDEEP 196608:JtcITtcIIONWyZ/K0ttYVAATwtcITtcIIONWyZ/K0ttYVAAT/:IBhhyZ/K0ttYZT5BhhyZ/K0ttYZT/
- TLSH T104376B13B1E100A9D1AAD074CF669731E7B27C598BF096EB7140B2D92F33AD07A39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application