General
- Target 2026-08-04_93c2062e57f5bed4d3f90d1ebb1d4864_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar
- Size 7.1MB
- Sample260804-g1g65ssgnf
- SHA256 eb051143d5718008e773b2b6880348feb1ebee6aa4c95ad22ff56f8ff6f159d4
- MD5 93c2062e57f5bed4d3f90d1ebb1d4864
- SHA1 a7bfc43c3df35b58f8b9e9a15b0b78fe7506717b
- SHA512 1680144a652601cada04e0708ef57ddc7f87cbf2a47fed1755acbb61f5a983b2ad61224f081306793ad6ee78b881c197bb310606c583fad771f0c8bffd9828d9
- SSDEEP 98304:Y1lf2xZPzNsGb6dl5EWQtZ/K0tGOFWVRuLftCTG:YiZPzmGi5EWyZ/K0ttYVAATG
- TLSH T1C1768D13F2E500E8E0AAE174DB769231DB727C154BF5A5DF2240B6E51E36AD0BB38712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-04_93c2062e57f5bed4d3f90d1ebb1d4864_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_rhad.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_93c2062e57f5bed4d3f90d1ebb1d4864_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_rhad.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_93c2062e57f5bed4d3f90d1ebb1d4864_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar
- Size 7.1MB
- SHA256 eb051143d5718008e773b2b6880348feb1ebee6aa4c95ad22ff56f8ff6f159d4
- MD5 93c2062e57f5bed4d3f90d1ebb1d4864
- SHA1 a7bfc43c3df35b58f8b9e9a15b0b78fe7506717b
- SHA512 1680144a652601cada04e0708ef57ddc7f87cbf2a47fed1755acbb61f5a983b2ad61224f081306793ad6ee78b881c197bb310606c583fad771f0c8bffd9828d9
- SSDEEP 98304:Y1lf2xZPzNsGb6dl5EWQtZ/K0tGOFWVRuLftCTG:YiZPzmGi5EWyZ/K0ttYVAATG
- TLSH T1C1768D13F2E500E8E0AAE174DB769231DB727C154BF5A5DF2240B6E51E36AD0BB38712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory