General
- Target 2026-08-03_ae7f279b245882ba57981bb50c2941a7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 11.1MB
- Sample260804-l9s28as1ct
- SHA256 6242d007d321257df3104e4330fe9563e68b890a720fb84684c56e4266719038
- MD5 ae7f279b245882ba57981bb50c2941a7
- SHA1 06d5277b2091883f5c2a240b9ece533def6966ac
- SHA512 9659567d6f1195be3d779f83e4e90dbce9d3d61f079fd3ef1cd2463bd37bd39ab9742c2d0e8cfee28c36e34408842981093e7f83a90ecca184c335f58c6ac529
- SSDEEP 98304:Su5x6M1pLapIAu5x6M1pLapIIoqTezSC6v2XMHSWQtZ/K0tGOFWVRuLftCT:JtcITtcIIONWyZ/K0ttYVAAT
- TLSH T1A2C66B13B1E100A9D1AAD074CF669731E7B27C598BF096EB7140B2D92F33AD07A39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_ae7f279b245882ba57981bb50c2941a7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_ae7f279b245882ba57981bb50c2941a7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_ae7f279b245882ba57981bb50c2941a7_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 11.1MB
- SHA256 6242d007d321257df3104e4330fe9563e68b890a720fb84684c56e4266719038
- MD5 ae7f279b245882ba57981bb50c2941a7
- SHA1 06d5277b2091883f5c2a240b9ece533def6966ac
- SHA512 9659567d6f1195be3d779f83e4e90dbce9d3d61f079fd3ef1cd2463bd37bd39ab9742c2d0e8cfee28c36e34408842981093e7f83a90ecca184c335f58c6ac529
- SSDEEP 98304:Su5x6M1pLapIAu5x6M1pLapIIoqTezSC6v2XMHSWQtZ/K0tGOFWVRuLftCT:JtcITtcIIONWyZ/K0ttYVAAT
- TLSH T1A2C66B13B1E100A9D1AAD074CF669731E7B27C598BF096EB7140B2D92F33AD07A39716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry