General
- Target 2026-08-03_dd6261ef23c27749f4b3d2cf997c3b7c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 35.7MB
- Sample260804-la8nmastaz
- SHA256 2bc9a04da0cd320435bb0a0c2d123a419c6b20ce230074762ae75bf0d4fc866b
- MD5 dd6261ef23c27749f4b3d2cf997c3b7c
- SHA1 c7c54049dd79b3a3d33a78f7cb1eaf72c770882f
- SHA512 8e02c94029ec5ea14c2b8ac4674e7acf0e11d5c26c00f048d175182fa0856070b557e30180c6a3f20ad8703db0ca5605a01f4b3893b273ff2df23f6b60aef70c
- SSDEEP 786432:zyZ/K0ttYZTEqTcyZ/K0ttYZTEqT7yZ/K0ttYZTEqTcyZ/K0ttYZTEu:uZ/K0ttYREqTnZ/K0ttYREqTmZ/K0ttl
- TLSH T184876D13F2E441A9E0AAD174CF669631EB327C494BF195DF2240B6D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_dd6261ef23c27749f4b3d2cf997c3b7c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_dd6261ef23c27749f4b3d2cf997c3b7c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_dd6261ef23c27749f4b3d2cf997c3b7c_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 35.7MB
- SHA256 2bc9a04da0cd320435bb0a0c2d123a419c6b20ce230074762ae75bf0d4fc866b
- MD5 dd6261ef23c27749f4b3d2cf997c3b7c
- SHA1 c7c54049dd79b3a3d33a78f7cb1eaf72c770882f
- SHA512 8e02c94029ec5ea14c2b8ac4674e7acf0e11d5c26c00f048d175182fa0856070b557e30180c6a3f20ad8703db0ca5605a01f4b3893b273ff2df23f6b60aef70c
- SSDEEP 786432:zyZ/K0ttYZTEqTcyZ/K0ttYZTEqT7yZ/K0ttYZTEqTcyZ/K0ttYZTEu:uZ/K0ttYREqTnZ/K0ttYREqTmZ/K0ttl
- TLSH T184876D13F2E441A9E0AAD174CF669631EB327C494BF195DF2240B6D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry